CVE-2017-10140
HIGH7.8EPSS 0.30%db4.7 - security update
發布日:2018/4/16修改日:2026/4/28
描述
Postfix before 2.11.10, 3.0.x before 3.0.10, 3.1.x before 3.1.6, and 3.2.x before 3.2.2 might allow local users to gain privileges by leveraging undocumented functionality in Berkeley DB 2.x and later, related to reading settings from DB_CONFIG in the current directory.
受影響套件(4)
- Debian/dbfrom 0, < 5.1.29-5+deb7u1
- Debian/db4.7from 0, < 4.7.25-21+deb7u1
- Debian/db4.8from 0, < 4.8.30-12+deb7u1
- Debian/db5.3from 0, < 5.3.28-13.1
CVSS 分數
| 來源 | 版本 | 嚴重程度 | 向量 |
|---|---|---|---|
| osv | CVSS 3.1 | HIGH7.8 | CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |