Data Store Vulnerability in Oracle Berkeley DB

CVE-2017-3608

Summary

A vulnerability in the Data Store component of Oracle Berkeley DB affects versions prior to 6.2.32. This flaw allows an unauthenticated attacker who has access to the infrastructure running Data Store to exploit the vulnerability and potentially compromise its integrity. Successful exploitation requires human interaction from a user other than the attacker, making social engineering a factor in successful attack scenarios. If successfully executed, it may lead to the complete takeover of the Data Store, thereby jeopardizing the confidentiality, integrity, and availability of the stored data.

References