CVE-2017-3605: Vulnerability in the Data Store component of Oracle Berkeley DB.

Security readout for executives and security teams

CVE-2017-3605 is a takeover-risk vulnerability in Oracle Berkeley DB Data Store before 6.2.32. It is not described as remotely exploitable from the internet: the attacker needs logon access to the infrastructure and a separate user interaction. The business concern is high-impact compromise where Berkeley DB is present in production or embedded software. Exposure is most likely on systems or embedded products running Oracle Berkeley DB Data Store before 6.2.32, especially where local infrastructure access is possible. Internet-only asset scanning may miss this because the CVSS vector is local. Treat as a high-impact but access-constrained issue. Prioritize environments where Berkeley DB supports critical applications or where many users can log on to affected hosts. It is less urgent than proven internet-exploited vulnerabilities, but takeover impact justifies remediation tracking. Mitigation focus: Identify and upgrade Berkeley DB deployments prior to 6.2.32 using Oracle guidance.; Apply the relevant Oracle April 2017 Critical Patch Update where applicable.; Restrict local logon access to systems running Berkeley DB Data Store..

Prepared

Jun 13, 2026, 05:18 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.