Postfix before 2.11.10, 3.0.x before 3.0.10, 3.1.x before 3.1.6, and 3.2.x before 3.2.2 might allow local users to gain privileges by leveraging undocumented functionality in Berkeley DB 2.x and later, related to reading settings from DB_CONFIG in the current directory.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | amazon-linux-ami-2-upgrade-libdbamazon-linux-ami-2-upgrade-libdb-cxxamazon-linux-ami-2-upgrade-libdb-cxx-develamazon-linux-ami-2-upgrade-libdb-debuginfoamazon-linux-ami-2-upgrade-libdb-develamazon-linux-ami-2-upgrade-libdb-devel-docamazon-linux-ami-2-upgrade-libdb-devel-staticamazon-linux-ami-2-upgrade-libdb-javaamazon-linux-ami-2-upgrade-libdb-java-develamazon-linux-ami-2-upgrade-libdb-sqlamazon-linux-ami-2-upgrade-libdb-sql-develamazon-linux-ami-2-upgrade-libdb-tclamazon-linux-ami-2-upgrade-libdb-tcl-develamazon-linux-ami-2-upgrade-libdb-utils | Mar 7, 2023 | Apr 16, 2018 | |
| Amazon_linux | — | amazon-linux-upgrade-db4 | Apr 6, 2023 | Nov 21, 2017 |
| Apple Osx Postfix | apple-osx-security-update-2017-001-sierraapple-osx-security-update-2017-004-el-capitanapple-osx-upgrade-latest | Nov 20, 2017 | Nov 20, 2017 | |
| Arch Linux | arch-linux-upgrade-latest | Jul 11, 2025 | Apr 16, 2018 | |
| Debian | debian-upgrade-dbdebian-upgrade-db4-7debian-upgrade-db4-8debian-upgrade-db5-3 | Feb 25, 2019 | Apr 16, 2018 | |
| Huawei Euleros 2_0_sp2 | huawei-euleros-2_0_sp2-upgrade-postfixhuawei-euleros-2_0_sp2-upgrade-postfix-perl-scripts | Jul 3, 2018 | Apr 16, 2018 | |
| Huawei Euleros 2_0_sp3 | huawei-euleros-2_0_sp3-upgrade-postfixhuawei-euleros-2_0_sp3-upgrade-postfix-perl-scripts | Jul 3, 2018 | Apr 16, 2018 | |
| Huawei Euleros 2_0_sp5 | huawei-euleros-2_0_sp5-upgrade-libdbhuawei-euleros-2_0_sp5-upgrade-libdb-develhuawei-euleros-2_0_sp5-upgrade-libdb-utils | Sep 24, 2019 | Apr 16, 2018 | |
| Oracle Solaris | oracle-solaris-11-3-upgrade-service-network-smtp-postfix-3-2-2-0-175-3-23-0-1-0 | Jun 18, 2018 | Apr 16, 2018 | |
| Postfix | postfix-upgrade-latest | Jun 4, 2018 | Apr 16, 2018 | |
| Redhat_linux | — | no-fix-redhat-rpm-package | Jul 9, 2025 | Apr 16, 2018 |
| Ubuntu | ubuntu-upgrade-db4-8-utilubuntu-upgrade-db5-1-utilubuntu-upgrade-db5-3-utilubuntu-upgrade-libdb4-8ubuntu-upgrade-libdb5-1ubuntu-upgrade-libdb5-3 | Nov 22, 2017 | Nov 21, 2017 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub