CVE-2017-3617
HighSummary
Vulnerability in the Data Store component of Oracle Berkeley DB, affecting versions prior to 6.2.32. It allows an unauthenticated attacker with access to the infrastructure where Data Store runs to compromise it, but requires interaction from a person other than the attacker.
Risk Assessment
An attacker could take control of the Data Store, potentially leading to serious breaches of confidentiality, integrity, and availability of data.
Recommendation
It is recommended to upgrade to version 6.2.32 or later to mitigate this vulnerability.
Other vulnerabilities in Data Store component of Oracle Berkeley DB
See all- CVE-2017-3616High
Vulnerability in the Data Store component of Oracle Berkeley DB, affecting versions prior to 6.2.32. It allows an unauthenticated attacker with access to the infrastructure where Data Store runs to compromise it.
- CVE-2017-3615High
Vulnerability in the Data Store component of Oracle Berkeley DB, affecting versions prior to 6.2.32. It allows an unauthenticated attacker with access to the infrastructure where Data Store runs to compromise it, requiring interaction from a person other than the attacker.
- CVE-2017-3614High
Vulnerability in the Data Store component of Oracle Berkeley DB, affecting versions prior to 6.2.32. It allows an unauthenticated attacker with access to the infrastructure where Data Store runs to compromise it, but requires interaction from a person other than the attacker.
- CVE-2017-3613High
Vulnerability in the Data Store component of Oracle Berkeley DB, affecting versions prior to 6.2.32. It allows an unauthenticated attacker with access to the infrastructure where Data Store runs to compromise it, requiring interaction from a person other than the attacker.
- CVE-2017-3612High
Vulnerability in the Data Store component of Oracle Berkeley DB, affecting versions prior to 6.2.32. It allows an unauthenticated attacker with access to the infrastructure where Data Store runs to compromise it, but requires interaction from a person other than the attacker.
- CVE-2017-3611High
Vulnerability in the Data Store component of Oracle Berkeley DB, affecting versions prior to 6.2.32. It allows an unauthenticated attacker with access to the infrastructure where Data Store runs to compromise it, but requires interaction from another person.
- CVE-2017-3610High
Vulnerability in the Data Store component of Oracle Berkeley DB, affecting versions prior to 6.2.32. It allows an unauthenticated attacker with access to the infrastructure where Data Store runs to compromise it.
- CVE-2017-3609High
Vulnerability in the Data Store component of Oracle Berkeley DB, affecting versions prior to 6.2.32. It allows an unauthenticated attacker with access to the infrastructure where Data Store runs to compromise it, requiring interaction from a person other than the attacker.
- CVE-2017-3608High
Vulnerability in the Data Store component of Oracle Berkeley DB, affecting versions prior to 6.2.32. It allows an unauthenticated attacker with access to the infrastructure where Data Store runs to compromise it, requiring interaction from a person other than the attacker.
- CVE-2017-3607High
Vulnerability in the Data Store component of Oracle Berkeley DB, affecting versions prior to 6.2.32. It allows an unauthenticated attacker with access to the infrastructure where Data Store runs to compromise it, but requires interaction from a person other than the attacker.
Original NVD description (English source)
Vulnerability in the Data Store component of Oracle Berkeley DB. The supported version that is affected is Prior to 6.2.32. Difficult to exploit vulnerability allows unauthenticated attacker with logon to the infrastructure where Data Store executes to compromise Data Store. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in takeover of Data Store. CVSS 3.0 Base Score 7.0 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H).