Vulnerability in the Data Store component of Oracle Berkeley DB. Supported versions that are affected are Prior to 6.138 prior to 6.2.38 and prior to 18.1.32. Easily exploitable vulnerability allows low privileged attacker having Local Logon privilege with logon to the infrastructure where Data Store executes to compromise Data Store. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Data Store. CVSS 3.0 Base Score 3.3 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L).

🗓️ 30 Jul 2021 07:00:00Reported by MicrosoftType

Oracle Berkeley Database Data Store vulnerability enables denial of service by a low privileged attacker.

Reporter	Title	Published	Views	Family All 78
IBM Security Bulletins	Security Bulletin: Cloud Pak for Security uses packages that are vulnerable to several CVEs	19 Oct 202115:38	–	ibm
IBM Security Bulletins	Security Bulletin: IBM QRadar SIEM Application Framework Base Image is vulnerable to using components with Known Vulnerabilities	3 Dec 202118:52	–	ibm
Tenable Nessus	Alibaba Cloud Linux 3 : 0092: libdb (ALINUX3-SA-2022:0092)	14 May 202500:00	–	nessus
Tenable Nessus	AlmaLinux 8 : libdb (ALSA-2021:1675)	9 Feb 202200:00	–	nessus
Tenable Nessus	CentOS 8 : libdb (CESA-2021:1675)	19 May 202100:00	–	nessus
Tenable Nessus	EulerOS 2.0 SP8 : libdb (EulerOS-SA-2021-1150)	1 Feb 202100:00	–	nessus
Tenable Nessus	EulerOS Virtualization for ARM 64 3.0.6.0 : libdb (EulerOS-SA-2021-1555)	4 Mar 202100:00	–	nessus
Tenable Nessus	EulerOS 2.0 SP5 : libdb (EulerOS-SA-2022-2274)	17 Aug 202200:00	–	nessus
Tenable Nessus	EulerOS 2.0 SP9 : libdb (EulerOS-SA-2022-2294)	14 Sep 202200:00	–	nessus
Tenable Nessus	EulerOS 2.0 SP9 : libdb (EulerOS-SA-2022-2323)	14 Sep 202200:00	–	nessus