CVE-2017-3606: Vulnerability in the Data Store component of Oracle Berkeley DB.

Security readout for executives and security teams

Oracle Berkeley DB Data Store before 6.2.32 has a serious vulnerability that can result in takeover of Data Store. Exploitation is constrained: the attacker needs logon access to the infrastructure where Data Store runs, high complexity conditions, and human interaction from another person. Exposure is most likely where Oracle Berkeley DB before 6.2.32 is installed or embedded in software. The source bundle names only Oracle Berkeley DB, with no specific operating systems, CPEs, or downstream bundled products. Treat this as a high-priority legacy exposure cleanup for systems using Berkeley DB. It is not presented as remotely exploitable or actively exploited, but successful compromise could fully affect confidentiality, integrity, and availability of Data Store. Mitigation focus: Confirm whether Oracle Berkeley DB is present and identify the installed version.; Prioritize upgrading Berkeley DB instances prior to 6.2.32 using Oracle guidance.; Review Oracle April 2017 CPU guidance before choosing patch timing..

Prepared

Jun 13, 2026, 05:18 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.