CVE-2017-3613: Vulnerability in the Data Store component of Oracle Berkeley DB.

Security readout for executives and security teams

Oracle Berkeley DB before 6.2.32 has a Data Store flaw that can let an attacker take over the Data Store. The attacker needs access to the infrastructure where it runs and must rely on another person’s interaction, so this is serious but not a typical remote drive-by risk. Exposure is most likely in systems embedding or deploying Oracle Berkeley DB versions before 6.2.32, especially servers or applications where local infrastructure access exists. The source bundle does not identify specific downstream products or distributions. Treat as a high-priority remediation item for systems that use Berkeley DB and permit infrastructure logon access. Prioritize internet-adjacent or business-critical services first, but confirm exposure before emergency action because exploitation prerequisites are restrictive. Mitigation focus: Inventory applications and services using Oracle Berkeley DB.; Upgrade Berkeley DB deployments prior to 6.2.32 per Oracle guidance.; Restrict infrastructure logon access around affected systems..

Prepared

Jun 13, 2026, 05:18 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.