CVE-2017-3608: Vulnerability in the Data Store component of Oracle Berkeley DB.

Security readout for executives and security teams

Oracle Berkeley DB Data Store before 6.2.32 has a vulnerability that can lead to full Data Store takeover. The attacker must already have logon access to the infrastructure and needs another person to interact, so this is not described as easy remote exploitation. Exposure is limited to environments running Oracle Berkeley DB Data Store before 6.2.32, including systems where Berkeley DB is deployed as part of infrastructure or an application stack. Source data does not identify specific operating systems or downstream products. Treat as a high-priority legacy exposure if Berkeley DB protects important data or supports critical services. The attack prerequisites reduce urgency compared with internet-facing flaws, but successful compromise can fully affect confidentiality, integrity, and availability. Mitigation focus: Identify Berkeley DB deployments and confirm whether Data Store is used.; Upgrade affected deployments according to Oracle April 2017 CPU guidance.; Move from versions prior to 6.2.32 to a non-affected supported release..

Prepared

Jun 13, 2026, 05:18 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.