{
  "cveId": "CVE-2017-10140",
  "url": "https://patchblox.com/security/cve/CVE-2017-10140",
  "summary": "CVE-2017-10140 is fixed in 9 products on 1 platform, first by db5.3-sql-util 5.3.28-13.1, released August 13, 2017. It is not reported as exploited. Patch Radar priority: Routine.",
  "title": "db5.3-sql-util: Postfix before 2.11.10, 3.0.x before 3.0.10, 3.1.x before 3.1.6, and 3.2.x before 3.2.2 might allow local users to ga...",
  "description": "Postfix before 2.11.10, 3.0.x before 3.0.10, 3.1.x before 3.1.6, and 3.2.x before 3.2.2 might allow local users to gain privileges by leveraging undocumented functionality in Berkeley DB 2.x and later, related to reading settings from DB_CONFIG in the current directory.",
  "published": "2017-08-13T17:00:00Z",
  "severity": "Medium",
  "epss": 0.00547,
  "epssPercentile": 0.46041,
  "priority": "Routine",
  "priorityTier": 4,
  "exploited": false,
  "vendorExploited": false,
  "disclosed": false,
  "fixes": [
    {
      "platform": "linux",
      "product": "db5.3-sql-util",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "5.3.28-13.1",
      "fix": "db5.3-sql-util 5.3.28-13.1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-db5.3-sql-util-5.3.28-13.1",
      "released": "2017-08-13T17:00:00Z"
    },
    {
      "platform": "linux",
      "product": "db5.3-util",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "5.3.28-13.1",
      "fix": "db5.3-util 5.3.28-13.1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-db5.3-util-5.3.28-13.1",
      "released": "2017-08-13T17:00:00Z"
    },
    {
      "platform": "linux",
      "product": "libdb5.3",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "5.3.28-13.1",
      "fix": "libdb5.3 5.3.28-13.1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-libdb5.3-5.3.28-13.1",
      "released": "2017-08-13T17:00:00Z"
    },
    {
      "platform": "linux",
      "product": "libdb5.3\u002B\u002B",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "5.3.28-13.1",
      "fix": "libdb5.3 5.3.28-13.1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-libdb5.3-5.3.28-13.1",
      "released": "2017-08-13T17:00:00Z"
    },
    {
      "platform": "linux",
      "product": "libdb5.3-java",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "5.3.28-13.1",
      "fix": "libdb5.3-java 5.3.28-13.1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-libdb5.3-java-5.3.28-13.1",
      "released": "2017-08-13T17:00:00Z"
    },
    {
      "platform": "linux",
      "product": "libdb5.3-java-jni",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "5.3.28-13.1",
      "fix": "libdb5.3-java-jni 5.3.28-13.1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-libdb5.3-java-jni-5.3.28-13.1",
      "released": "2017-08-13T17:00:00Z"
    },
    {
      "platform": "linux",
      "product": "libdb5.3-sql",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "5.3.28-13.1",
      "fix": "libdb5.3-sql 5.3.28-13.1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-libdb5.3-sql-5.3.28-13.1",
      "released": "2017-08-13T17:00:00Z"
    },
    {
      "platform": "linux",
      "product": "libdb5.3-stl",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "5.3.28-13.1",
      "fix": "libdb5.3-stl 5.3.28-13.1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-libdb5.3-stl-5.3.28-13.1",
      "released": "2017-08-13T17:00:00Z"
    },
    {
      "platform": "linux",
      "product": "libdb5.3-tcl",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "5.3.28-13.1",
      "fix": "libdb5.3-tcl 5.3.28-13.1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-libdb5.3-tcl-5.3.28-13.1",
      "released": "2017-08-13T17:00:00Z"
    }
  ],
  "noFixYet": [],
  "dataAsOf": "2026-11-07T06:34:28Z"
}