1. Home
  2. Security Advisories
  3. Alpine Linux
  4. ALPINE:CVE-2024-31458

[ALPINE:CVE-2024-31458] cacti vulnerability

Severity Medium
Affected Packages 15
Fixed Packages 15
CVEs 1
Info Packages Vulnerabilities

[From CVE-2024-31458] Cacti provides an operational monitoring and fault management framework. Prior to version 1.2.27, some of the data stored in form_save() function in graph_template_inputs.php is not thoroughly checked and is used to concatenate the SQL statement in draw_nontemplated_fields_graph_item() function from lib/html_form_templates.php , finally resulting in SQL injection. Version 1.2.27 contains a patch for the issue.

Package Affected Version
pkg:apk/alpine/cacti?arch=x86_64&distro=alpine-edge < 1.2.27-r0
pkg:apk/alpine/cacti?arch=x86_64&distro=alpine-3.19 < 1.2.27-r0
pkg:apk/alpine/cacti?arch=x86&distro=alpine-edge < 1.2.27-r0
pkg:apk/alpine/cacti?arch=x86&distro=alpine-3.19 < 1.2.27-r0
pkg:apk/alpine/cacti?arch=s390x&distro=alpine-edge < 1.2.27-r0
pkg:apk/alpine/cacti?arch=s390x&distro=alpine-3.19 < 1.2.27-r0
pkg:apk/alpine/cacti?arch=riscv64&distro=alpine-edge < 1.2.27-r0
pkg:apk/alpine/cacti?arch=ppc64le&distro=alpine-edge < 1.2.27-r0
pkg:apk/alpine/cacti?arch=ppc64le&distro=alpine-3.19 < 1.2.27-r0
pkg:apk/alpine/cacti?arch=armv7&distro=alpine-edge < 1.2.27-r0
pkg:apk/alpine/cacti?arch=armv7&distro=alpine-3.19 < 1.2.27-r0
pkg:apk/alpine/cacti?arch=armhf&distro=alpine-edge < 1.2.27-r0
pkg:apk/alpine/cacti?arch=armhf&distro=alpine-3.19 < 1.2.27-r0
pkg:apk/alpine/cacti?arch=aarch64&distro=alpine-edge < 1.2.27-r0
pkg:apk/alpine/cacti?arch=aarch64&distro=alpine-3.19 < 1.2.27-r0
Package Fixed Version
pkg:apk/alpine/cacti?arch=x86_64&distro=alpine-edge = 1.2.27-r0
pkg:apk/alpine/cacti?arch=x86_64&distro=alpine-3.19 = 1.2.27-r0
pkg:apk/alpine/cacti?arch=x86&distro=alpine-edge = 1.2.27-r0
pkg:apk/alpine/cacti?arch=x86&distro=alpine-3.19 = 1.2.27-r0
pkg:apk/alpine/cacti?arch=s390x&distro=alpine-edge = 1.2.27-r0
pkg:apk/alpine/cacti?arch=s390x&distro=alpine-3.19 = 1.2.27-r0
pkg:apk/alpine/cacti?arch=riscv64&distro=alpine-edge = 1.2.27-r0
pkg:apk/alpine/cacti?arch=ppc64le&distro=alpine-edge = 1.2.27-r0
pkg:apk/alpine/cacti?arch=ppc64le&distro=alpine-3.19 = 1.2.27-r0
pkg:apk/alpine/cacti?arch=armv7&distro=alpine-edge = 1.2.27-r0
pkg:apk/alpine/cacti?arch=armv7&distro=alpine-3.19 = 1.2.27-r0
pkg:apk/alpine/cacti?arch=armhf&distro=alpine-edge = 1.2.27-r0
pkg:apk/alpine/cacti?arch=armhf&distro=alpine-3.19 = 1.2.27-r0
pkg:apk/alpine/cacti?arch=aarch64&distro=alpine-edge = 1.2.27-r0
pkg:apk/alpine/cacti?arch=aarch64&distro=alpine-3.19 = 1.2.27-r0
ID
ALPINE:CVE-2024-31458
Severity
medium
Severity from
CVE-2024-31458
URL
https://security.alpinelinux.org/vuln/CVE-2024-31458
Published
2024-05-14T15:25:25
(4 months ago)
Modified
2024-05-14T15:25:25
(4 months ago)
Rights
Alpine Linux Security Team
Other Advisories
Type Package URL Namespace Name / Product Version Distribution / Platform Arch Patch / Fix
Fixed pkg:apk/alpine/cacti?arch=x86_64&distro=alpine-edge alpine cacti = 1.2.27-r0 alpine-edge x86_64
Affected pkg:apk/alpine/cacti?arch=x86_64&distro=alpine-edge alpine cacti < 1.2.27-r0 alpine-edge x86_64
Fixed pkg:apk/alpine/cacti?arch=x86_64&distro=alpine-3.19 alpine cacti = 1.2.27-r0 alpine-3.19 x86_64
Affected pkg:apk/alpine/cacti?arch=x86_64&distro=alpine-3.19 alpine cacti < 1.2.27-r0 alpine-3.19 x86_64
Fixed pkg:apk/alpine/cacti?arch=x86&distro=alpine-edge alpine cacti = 1.2.27-r0 alpine-edge x86
Affected pkg:apk/alpine/cacti?arch=x86&distro=alpine-edge alpine cacti < 1.2.27-r0 alpine-edge x86
Fixed pkg:apk/alpine/cacti?arch=x86&distro=alpine-3.19 alpine cacti = 1.2.27-r0 alpine-3.19 x86
Affected pkg:apk/alpine/cacti?arch=x86&distro=alpine-3.19 alpine cacti < 1.2.27-r0 alpine-3.19 x86
Fixed pkg:apk/alpine/cacti?arch=s390x&distro=alpine-edge alpine cacti = 1.2.27-r0 alpine-edge s390x
Affected pkg:apk/alpine/cacti?arch=s390x&distro=alpine-edge alpine cacti < 1.2.27-r0 alpine-edge s390x
Fixed pkg:apk/alpine/cacti?arch=s390x&distro=alpine-3.19 alpine cacti = 1.2.27-r0 alpine-3.19 s390x
Affected pkg:apk/alpine/cacti?arch=s390x&distro=alpine-3.19 alpine cacti < 1.2.27-r0 alpine-3.19 s390x
Fixed pkg:apk/alpine/cacti?arch=riscv64&distro=alpine-edge alpine cacti = 1.2.27-r0 alpine-edge riscv64
Affected pkg:apk/alpine/cacti?arch=riscv64&distro=alpine-edge alpine cacti < 1.2.27-r0 alpine-edge riscv64
Fixed pkg:apk/alpine/cacti?arch=ppc64le&distro=alpine-edge alpine cacti = 1.2.27-r0 alpine-edge ppc64le
Affected pkg:apk/alpine/cacti?arch=ppc64le&distro=alpine-edge alpine cacti < 1.2.27-r0 alpine-edge ppc64le
Fixed pkg:apk/alpine/cacti?arch=ppc64le&distro=alpine-3.19 alpine cacti = 1.2.27-r0 alpine-3.19 ppc64le
Affected pkg:apk/alpine/cacti?arch=ppc64le&distro=alpine-3.19 alpine cacti < 1.2.27-r0 alpine-3.19 ppc64le
Fixed pkg:apk/alpine/cacti?arch=armv7&distro=alpine-edge alpine cacti = 1.2.27-r0 alpine-edge armv7
Affected pkg:apk/alpine/cacti?arch=armv7&distro=alpine-edge alpine cacti < 1.2.27-r0 alpine-edge armv7
Fixed pkg:apk/alpine/cacti?arch=armv7&distro=alpine-3.19 alpine cacti = 1.2.27-r0 alpine-3.19 armv7
Affected pkg:apk/alpine/cacti?arch=armv7&distro=alpine-3.19 alpine cacti < 1.2.27-r0 alpine-3.19 armv7
Fixed pkg:apk/alpine/cacti?arch=armhf&distro=alpine-edge alpine cacti = 1.2.27-r0 alpine-edge armhf
Affected pkg:apk/alpine/cacti?arch=armhf&distro=alpine-edge alpine cacti < 1.2.27-r0 alpine-edge armhf
Fixed pkg:apk/alpine/cacti?arch=armhf&distro=alpine-3.19 alpine cacti = 1.2.27-r0 alpine-3.19 armhf
Affected pkg:apk/alpine/cacti?arch=armhf&distro=alpine-3.19 alpine cacti < 1.2.27-r0 alpine-3.19 armhf
Fixed pkg:apk/alpine/cacti?arch=aarch64&distro=alpine-edge alpine cacti = 1.2.27-r0 alpine-edge aarch64
Affected pkg:apk/alpine/cacti?arch=aarch64&distro=alpine-edge alpine cacti < 1.2.27-r0 alpine-edge aarch64
Fixed pkg:apk/alpine/cacti?arch=aarch64&distro=alpine-3.19 alpine cacti = 1.2.27-r0 alpine-3.19 aarch64
Affected pkg:apk/alpine/cacti?arch=aarch64&distro=alpine-3.19 alpine cacti < 1.2.27-r0 alpine-3.19 aarch64
# CVE Description CVSS EPSS EPSS Trend (30 days) Affected Products Weaknesses Security Advisories Exploits PoC Pubblication Date Modification Date
# CVE Description CVSS EPSS EPSS Trend (30 days) Affected Products Weaknesses Security Advisories PoC Pubblication Date Modification Date