CVE-2007-3112
graph_image.php in Cacti 0.8.6i, and possibly other versions, allows remote authenticated users...
CVE-2007-3112 is a high vulnerability (CVSS 7.8) in The Cacti Group Cacti, published June 7, 2007. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 2.41%, the 84th percentile. Fixed in cacti 0.8.6j-1.1.
- Severity
- 7.8 HighCVSS 2.0, NVD
- Exploit chance
- 2.41%EPSS, 84th percentile
- Exploitation
- None knownNot on CISA’s or ENISA’s lists
- Fixed in
0.8.6j-1.1cacti +5 more
Description
graph_image.php in Cacti 0.8.6i, and possibly other versions, allows remote authenticated users to cause a denial of service (CPU consumption) via a large value of the (1) graph_start or (2) graph_end parameter, different vectors than CVE-2007-3113.
Exploit likelihood
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
cactiDebian:12 | before 0.8.6j-1.1 | 0.8.6j-1.1 |
cactiDebian:13 | before 0.8.6j-1.1 | 0.8.6j-1.1 |
cactiDebian:14 | before 0.8.6j-1.1 | 0.8.6j-1.1 |
cactiDebian:4.0 From an advisory covering 3 CVEs | before 0.8.6i-3.6, plus listed versions 0.8.6i-30.8.6i-3.20.8.6i-3.30.8.6i-3.40.8.6i-3.5 | 0.8.6i-3.6 |
cactiDebian:5.0 From an advisory covering 3 CVEs | before 0.8.7b-2.1+lenny1, plus listed versions 0.8.7b-2.1 | 0.8.7b-2.1+lenny1 |
cactiopenSUSE:Tumbleweed From an advisory covering 31 CVEs | before 1.2.18-1.2 | 1.2.18-1.2 |
What each source reports
NVD Score used
graph_image.php in Cacti 0.8.6i, and possibly other versions, allows remote authenticated users to cause a denial of service (CPU consumption) via a large value of the (1) graph_start or (2) graph_end parameter, different vectors than CVE-2007-3113.
- Record
CVE-2007-3112- CVSS 2.0
- 7.8 High
AV:N/AC:L/Au:N/C:N/I:N/A:C - Updated
- 2026-11-02
CVE ListNo score
graph_image.php in Cacti 0.8.6i, and possibly other versions, allows remote authenticated users to cause a denial of service (CPU consumption) via a large value of the (1) graph_start or (2) graph_end parameter, different vectors than CVE-2007-3113.
- Record
CVE-2007-3112- Updated
- 2026-11-02
EUVDEUVD-2007-3104No score
graph_image.php in Cacti 0.8.6i, and possibly other versions, allows remote authenticated users to cause a denial of service (CPU consumption) via a large value of the (1) graph_start or (2) graph_end parameter, different vectors than CVE-2007-3113.
- Record
EUVD-2007-3104- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-3wj7-jcqx-7j5fNo score
graph_image.php in Cacti 0.8.6i, and possibly other versions, allows remote authenticated users...
graph_image.php in Cacti 0.8.6i, and possibly other versions, allows remote authenticated users to cause a denial of service (CPU consumption) via a large value of the (1) graph_start or (2) graph_end parameter, different vectors than CVE-2007-3113.
- Record
GHSA-3wj7-jcqx-7j5f- Updated
- 2026-11-02
OSVNo score
graph_image.php in Cacti 0.8.6i, and possibly other versions, allows remote authenticated users to cause a denial of service (CPU consumption) via a large value of the (1) graph_start or (2) graph_end parameter, different vectors than CVE-2007-3113.
- Record
CVE-2007-3112- Updated
- 2026-11-02
OSVDEBIAN-CVE-2007-3112No score
graph_image.php in Cacti 0.8.6i, and possibly other versions, allows remote authenticated users to cause a denial of service (CPU consumption) via a large value of the (1) graph_start or (2) graph_end parameter, different vectors than CVE-2007-3113.
- Record
DEBIAN-CVE-2007-3112- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:10670-1No score
cacti-1.2.18-1.2 on GA media
These are all security issues fixed in the cacti-1.2.18-1.2 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:10670-1- Updated
- 2026-11-02
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| affected, aliases, facts, references, title | GitHub Advisories, OSV | |
| first indexed | CVE List, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
References
mdessus.free.fr?p=15
secunia.com/advisories/26872
bugzilla.redhat.com/show_bug.cgi?id=243592
mandriva.com/security/advisories?name=MDKSA-2007:184
archives.neohapsis.com/archives/fulldisclosure/2007-06/0074.html
bugs.cacti.net/view.php?id=955
Show 39 moreShow less
svn.cacti.net/cgi-bin/viewcvs.cgi/branches/BRANCH_0_8_6/cacti/graph_image.php?rev=3956&r1=3898&r2=3956
fedoranews.org/updates/FEDORA-2007-219.shtml
exchange.xforce.ibmcloud.com/vulnerabilities/34747
osvdb.org/37019
nvd.nist.gov/vuln/detail/CVE-2007-3112
github.com/advisories/GHSA-3wj7-jcqx-7j5f
security-tracker.debian.org/tracker/CVE-2007-3112
suse.com/security/cve/CVE-2006-6799