CVE-2017-3612: Vulnerability in the Data Store component of Oracle Berkeley DB.

Security readout for executives and security teams

CVE-2017-3612 affects Oracle Berkeley DB before 6.2.32. It is difficult to exploit, but a successful attack could let an attacker take over the Data Store component. The attacker needs local infrastructure logon and must induce human interaction, reducing broad internet risk but keeping the business impact high. Exposure is most likely where Oracle Berkeley DB prior to 6.2.32 is installed directly or embedded in applications, especially on systems where non-privileged users can log on to the host infrastructure. Treat this as a high-impact but constrained legacy dependency risk. Prioritize remediation where Berkeley DB supports important applications or where many users can access the host environment. Mitigation focus: Inventory Oracle Berkeley DB installations and embedded dependencies.; Upgrade affected Berkeley DB deployments to 6.2.32 or follow Oracle CPU guidance.; Restrict infrastructure logon access to trusted users only..

Prepared

Jun 13, 2026, 05:18 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.