CVE-2017-3609: Vulnerability in the Data Store component of Oracle Berkeley DB.

Security readout for executives and security teams

CVE-2017-3609 affects Oracle Berkeley DB Data Store versions prior to 6.2.32. Oracle rates the impact as full compromise of Data Store, but exploitation is difficult, local to the infrastructure, and requires user interaction. The bundle does not show active exploitation. Exposure is limited to environments running Oracle Berkeley DB Data Store prior to 6.2.32, especially systems where non-administrative or untrusted users can log on to hosts or workflows involving Data Store. Treat as high priority where Berkeley DB is present on shared or user-accessible infrastructure. Lower urgency may be reasonable for isolated systems with no untrusted logon paths, but unsupported legacy deployments should still be remediated. Mitigation focus: Identify all Oracle Berkeley DB deployments and versions.; Upgrade affected Data Store deployments to vendor-supported fixed guidance, 6.2.32 or later if applicable.; Restrict logon access to systems where Data Store executes..

Prepared

Jun 13, 2026, 05:18 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.