Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×

Alerts This Week
Warning Icon 1 464
Alerts This Week
Warning Icon 1 464

Ubuntu 17.04 LTS USN-3489-1 Moderate: Berkeley DB Info Leak

ubuntu
Calendar Grey November 21, 2017
Scroller Ubuntu
Explore the USN-3489-1 alert regarding the vulnerability in Berkeley DB that could lead to the disclosure of confidential information, along with the advised patches to secure the system.
Berkeley DB could be made to expose sensitive information.

Summary

Berkeley DB could be made to expose sensitive information.

Software Description:

- db5.3: Berkeley v5.3 Database Documentation [html]

Details:

It was discovered that Berkeley DB incorrectly handled certain

configuration files. An attacker could possibly use this issue to read

sensitive information.

Topics%20covered

Topics Covered

security advisory moderate data breach information exposure ubuntu berkeley db db5.3

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 17.04:
  db5.3-util                      5.3.28-12ubuntu0.1
  libdb5.3                        5.3.28-12ubuntu0.1

Ubuntu 16.04 LTS:
  db5.3-util                      5.3.28-11ubuntu0.1
  libdb5.3                        5.3.28-11ubuntu0.1

Ubuntu 14.04 LTS:
  db5.3-util                      5.3.28-3ubuntu3.1
  libdb5.3                        5.3.28-3ubuntu3.1

In general, a standard system update will make all the necessary
changes.

References

 

  CVE-2017-10140

Severity
important
Lowest
Low
Medium
High
Critical

November 21, 2017

Topics%20covered

Topics Covered

security advisory moderate data breach information exposure ubuntu berkeley db db5.3

Package Information

  https://launchpad.net/ubuntu/+source/db5.3/5.3.28-12ubuntu0.1
  https://launchpad.net/ubuntu/+source/db5.3/5.3.28-11ubuntu0.1
  https://launchpad.net/ubuntu/+source/db5.3/5.3.28-3ubuntu3.1

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.