CVE-2017-3617: Vulnerability in the Data Store component of Oracle Berkeley DB.

Security readout for executives and security teams

Oracle Berkeley DB Data Store versions prior to 6.2.32 have a vulnerability that can let an attacker take over the Data Store. The attack is difficult, requires local infrastructure access, and needs a separate user to interact, but the potential impact is full confidentiality, integrity, and availability compromise. Exposure is most likely in applications or systems embedding Oracle Berkeley DB Data Store versions prior to 6.2.32, especially where users or attackers can log on to infrastructure where Data Store executes. Treat as a high-impact legacy exposure. Prioritize remediation where Berkeley DB supports sensitive or operationally critical systems, but weigh urgency against the local access, high complexity, and user-interaction requirements. Mitigation focus: Inventory Berkeley DB Data Store deployments and bundled application dependencies.; Check Oracle April 2017 CPU guidance for applicable patches.; Upgrade or remediate deployments running versions prior to 6.2.32..

Prepared

Jun 13, 2026, 05:18 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.