Vulnerability in Data Store Component of Oracle Berkeley DB

CVE-2017-3616

What is CVE-2017-3616?

A vulnerability in the Data Store component of Oracle Berkeley DB allows an unauthenticated attacker with logon access to the system where Data Store operates to compromise its integrity. This flaw requires human interaction from a third party to successfully exploit. The outcome of an attack can lead to the complete takeover of the Data Store, which poses significant risks to confidentiality, integrity, and availability of data managed by the affected systems. Organizations utilizing Oracle Berkeley DB versions prior to 6.2.32 should take immediate action to mitigate the risks associated with this vulnerability.

References