{"id":"CVE-2019-2708","aliases":["ALSA-2021:1675","AZL-34927","AZL-6630","BELL-CVE-2019-2708","EUVD-2019-12347","GHSA-4h5r-2hfh-8prm","MGASA-2021-0057","OESA-2021-1156","RHSA-2021:1675","RLSA-2021:1675","SUSE-SU-2022:4214-1","SUSE-SU-2022:4289-1","SUSE-SU-2025:20067-1","openSUSE-SU-2024:14246-1"],"status":"published","title":"Vulnerability in the Data Store component of Oracle Berkeley DB. Supported versions that are...","description":"Vulnerability in the Data Store component of Oracle Berkeley DB. Supported versions that are affected are Prior to 6.138, prior to 6.2.38 and prior to 18.1.32. Easily exploitable vulnerability allows low privileged attacker having Local Logon privilege with logon to the infrastructure where Data Store executes to compromise Data Store. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Data Store. CVSS 3.0 Base Score 3.3 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L).","severity":{"version":"3.0","score":3.3,"vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L","level":"low","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.00604,"percentile":0.49186,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"published":"2019-04-23T18:16:45Z","modified":"2026-11-05T05:40:51Z","fixes":[{"ecosystem":"AlmaLinux:8","package":"libdb-cxx","fixed_in":["5.3.28-40.el8"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"libdb-cxx-devel","fixed_in":["5.3.28-40.el8"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"libdb-devel-doc","fixed_in":["5.3.28-40.el8"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"libdb-sql","fixed_in":["5.3.28-40.el8"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"libdb-sql-devel","fixed_in":["5.3.28-40.el8"],"sources":["osv"]},{"ecosystem":"Azure Linux:3","package":"libdb","fixed_in":["5.3.28-7"],"sources":["osv"]},{"ecosystem":"Azure Linux:2","package":"libdb","fixed_in":["5.3.28-7"],"sources":["osv"]},{"ecosystem":"Alpaquita:stream","package":"db","fixed_in":["5.3.28-r6"],"sources":["osv"]},{"ecosystem":"Mageia:7","package":"db53","fixed_in":["5.3.28-17.1.mga7"],"sources":["osv"]},{"ecosystem":"openEuler:20.03-LTS-SP1","package":"libdb","fixed_in":["5.3.28-36.oe1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"libdb-cxx-debuginfo","fixed_in":["0:5.3.28-40.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"libdb-debuginfo","fixed_in":["0:5.3.28-40.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"libdb-debugsource","fixed_in":["0:5.3.28-40.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"libdb-devel","fixed_in":["0:5.3.28-40.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"libdb-java-debuginfo","fixed_in":["0:5.3.28-40.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"libdb-sql-debuginfo","fixed_in":["0:5.3.28-40.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"libdb-sql-devel-debuginfo","fixed_in":["0:5.3.28-40.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"libdb-tcl-debuginfo","fixed_in":["0:5.3.28-40.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"libdb-utils-debuginfo","fixed_in":["0:5.3.28-40.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"libdb","fixed_in":["0:5.3.28-40.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"libdb-cxx-debuginfo","fixed_in":["0:5.3.28-40.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"libdb-debuginfo","fixed_in":["0:5.3.28-40.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"libdb-debugsource","fixed_in":["0:5.3.28-40.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"libdb-java-debuginfo","fixed_in":["0:5.3.28-40.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"libdb-sql-debuginfo","fixed_in":["0:5.3.28-40.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"libdb-sql-devel-debuginfo","fixed_in":["0:5.3.28-40.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"libdb-tcl-debuginfo","fixed_in":["0:5.3.28-40.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"libdb-utils","fixed_in":["0:5.3.28-40.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"libdb-utils-debuginfo","fixed_in":["0:5.3.28-40.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::crb","package":"libdb-cxx","fixed_in":["0:5.3.28-40.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::crb","package":"libdb-cxx-debuginfo","fixed_in":["0:5.3.28-40.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::crb","package":"libdb-cxx-devel","fixed_in":["0:5.3.28-40.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::crb","package":"libdb-debuginfo","fixed_in":["0:5.3.28-40.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::crb","package":"libdb-debugsource","fixed_in":["0:5.3.28-40.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::crb","package":"libdb-devel-doc","fixed_in":["0:5.3.28-40.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::crb","package":"libdb-java-debuginfo","fixed_in":["0:5.3.28-40.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::crb","package":"libdb-sql","fixed_in":["0:5.3.28-40.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::crb","package":"libdb-sql-debuginfo","fixed_in":["0:5.3.28-40.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::crb","package":"libdb-sql-devel","fixed_in":["0:5.3.28-40.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::crb","package":"libdb-sql-devel-debuginfo","fixed_in":["0:5.3.28-40.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::crb","package":"libdb-tcl-debuginfo","fixed_in":["0:5.3.28-40.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::crb","package":"libdb-utils-debuginfo","fixed_in":["0:5.3.28-40.el8"],"sources":["osv"]},{"ecosystem":"Rocky Linux:8","package":"libdb","fixed_in":["0:5.3.28-40.el8"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Micro 5.3","package":"libdb-4_8","fixed_in":["4.8.30-150000.7.6.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP3","package":"libdb-4_8","fixed_in":["4.8.30-150000.7.6.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP4","package":"libdb-4_8","fixed_in":["4.8.30-150000.7.6.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Micro 5.1","package":"libdb-4_8","fixed_in":["4.8.30-150000.7.6.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Micro 5.2","package":"libdb-4_8","fixed_in":["4.8.30-150000.7.6.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap Micro 5.2","package":"libdb-4_8","fixed_in":["4.8.30-150000.7.6.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap Micro 5.3","package":"libdb-4_8","fixed_in":["4.8.30-150000.7.6.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.3","package":"libdb-4_8","fixed_in":["4.8.30-150000.7.6.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.3","package":"libdb_java-4_8","fixed_in":["4.8.30-150000.7.6.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.4","package":"libdb-4_8","fixed_in":["4.8.30-150000.7.6.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.4","package":"libdb_java-4_8","fixed_in":["4.8.30-150000.7.6.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP5","package":"libdb-4_8","fixed_in":["4.8.30-33.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 12 SP5","package":"libdb-4_8","fixed_in":["4.8.30-33.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP5","package":"libdb-4_8","fixed_in":["4.8.30-33.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Micro 6.0","package":"libdb-4_8","fixed_in":["4.8.30-7.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Tumbleweed","package":"db48","fixed_in":["4.8.30-45.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"AlmaLinux:8","package":"libdb-cxx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.3.28-40.el8"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"libdb-cxx-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.3.28-40.el8"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"libdb-devel-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.3.28-40.el8"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"libdb-sql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.3.28-40.el8"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"libdb-sql-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.3.28-40.el8"}]}]},{"source":"osv","ecosystem":"Azure Linux:3","package":"libdb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.3.28-7"}]}]},{"source":"osv","ecosystem":"Azure Linux:2","package":"libdb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.3.28-7"}]}]},{"source":"osv","ecosystem":"Alpaquita:stream","package":"db","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.28-r2"},{"fixed":"5.3.28-r6"}]}]},{"source":"osv","ecosystem":"Mageia:7","package":"db53","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.3.28-17.1.mga7"}]}]},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP1","package":"libdb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.3.28-36.oe1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"libdb-cxx-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.3.28-40.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"libdb-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.3.28-40.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"libdb-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.3.28-40.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"libdb-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.3.28-40.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"libdb-java-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.3.28-40.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"libdb-sql-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.3.28-40.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"libdb-sql-devel-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.3.28-40.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"libdb-tcl-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.3.28-40.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"libdb-utils-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.3.28-40.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"libdb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.3.28-40.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"libdb-cxx-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.3.28-40.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"libdb-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.3.28-40.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"libdb-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.3.28-40.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"libdb-java-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.3.28-40.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"libdb-sql-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.3.28-40.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"libdb-sql-devel-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.3.28-40.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"libdb-tcl-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.3.28-40.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"libdb-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.3.28-40.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"libdb-utils-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.3.28-40.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"libdb-cxx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.3.28-40.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"libdb-cxx-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.3.28-40.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"libdb-cxx-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.3.28-40.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"libdb-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.3.28-40.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"libdb-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.3.28-40.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"libdb-devel-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.3.28-40.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"libdb-java-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.3.28-40.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"libdb-sql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.3.28-40.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"libdb-sql-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.3.28-40.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"libdb-sql-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.3.28-40.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"libdb-sql-devel-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.3.28-40.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"libdb-tcl-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.3.28-40.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"libdb-utils-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.3.28-40.el8"}]}]},{"source":"osv","ecosystem":"Rocky Linux:8","package":"libdb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.3.28-40.el8"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.3","package":"libdb-4_8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.8.30-150000.7.6.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP3","package":"libdb-4_8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.8.30-150000.7.6.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP4","package":"libdb-4_8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.8.30-150000.7.6.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.1","package":"libdb-4_8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.8.30-150000.7.6.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.2","package":"libdb-4_8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.8.30-150000.7.6.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap Micro 5.2","package":"libdb-4_8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.8.30-150000.7.6.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap Micro 5.3","package":"libdb-4_8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.8.30-150000.7.6.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.3","package":"libdb-4_8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.8.30-150000.7.6.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.3","package":"libdb_java-4_8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.8.30-150000.7.6.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.4","package":"libdb-4_8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.8.30-150000.7.6.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.4","package":"libdb_java-4_8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.8.30-150000.7.6.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP5","package":"libdb-4_8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.8.30-33.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP5","package":"libdb-4_8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.8.30-33.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP5","package":"libdb-4_8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.8.30-33.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Micro 6.0","package":"libdb-4_8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.8.30-7.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"db48","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.8.30-45.1"}]}]}],"products":[{"vendor":"oracle","product":"berkeley_db"},{"vendor":"oracle","product":"oracle berkeley db"},{"vendor":"oracle corporation","product":"oracle berkeley db"}],"references":[{"url":"http://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html","tags":["x_refsource_MISC","x_transferred","Patch","Vendor Advisory","advisory"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/OQFKX6NKU2DCW5CTCHQSOJJDFVRVTPO6/","tags":["vendor-advisory","x_refsource_FEDORA","x_transferred"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-2708","tags":["web","advisory"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/OQFKX6NKU2DCW5CTCHQSOJJDFVRVTPO6/"},{"url":"https://github.com/advisories/GHSA-4h5r-2hfh-8prm"},{"url":"https://vulners.com/cve/CVE-2019-2708","tags":["report"]},{"url":"https://docs.bell-sw.com/security/cves/CVE-2019-2708","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2021-0057.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=27960","tags":["report"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/thread/OQFKX6NKU2DCW5CTCHQSOJJDFVRVTPO6/","tags":["web"]},{"url":"https://openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2021-1156","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2021:1675","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#low","tags":["article"]},{"url":"https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/8/html/8.4_release_notes/","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1853242","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2021/rhsa-2021_1675.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-2708","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-2708","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2021:1675","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2022/suse-su-20224214-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1174414","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2019-2708","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2022/suse-su-20224289-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-202520067-1/","tags":["advisory"]},{"url":"","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2019-2708","description":"Vulnerability in the Data Store component of Oracle Berkeley DB. Supported versions that are affected are Prior to 6.138, prior to 6.2.38 and prior to 18.1.32. Easily exploitable vulnerability allows low privileged attacker having Local Logon privilege with logon to the infrastructure where Data Store executes to compromise Data Store. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Data Store. CVSS 3.0 Base Score 3.3 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L).","status":"published","published":"2019-04-23T18:16:45Z","modified":"2024-10-02T15:38:38.332Z","updated_at":"2026-11-02T14:20:22.3662Z"}],"euvd":[{"id":"EUVD-2019-12347","description":"Vulnerability in the Data Store component of Oracle Berkeley DB. Supported versions that are affected are Prior to 6.138, prior to 6.2.38 and prior to 18.1.32. Easily exploitable vulnerability allows low privileged attacker having Local Logon privilege with logon to the infrastructure where Data Store executes to compromise Data Store. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Data Store. CVSS 3.0 Base Score 3.3 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L).","status":"published","published":"2019-04-23T18:16:45Z","modified":"2024-10-02T15:38:38Z","updated_at":"2026-11-03T00:27:58.959241Z"}],"ghsa":[{"id":"GHSA-4h5r-2hfh-8prm","title":"Vulnerability in the Data Store component of Oracle Berkeley DB. Supported versions that are...","description":"Vulnerability in the Data Store component of Oracle Berkeley DB. Supported versions that are affected are Prior to 6.138, prior to 6.2.38 and prior to 18.1.32. Easily exploitable vulnerability allows low privileged attacker having Local Logon privilege with logon to the infrastructure where Data Store executes to compromise Data Store. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Data Store. CVSS 3.0 Base Score 3.3 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L).","status":"published","published":"2022-05-24T16:44:29Z","modified":"2023-01-28T05:05:17Z","updated_at":"2026-11-02T14:44:19.546147Z"}],"nvd":[{"id":"CVE-2019-2708","description":"Vulnerability in the Data Store component of Oracle Berkeley DB. Supported versions that are affected are Prior to 6.138, prior to 6.2.38 and prior to 18.1.32. Easily exploitable vulnerability allows low privileged attacker having Local Logon privilege with logon to the infrastructure where Data Store executes to compromise Data Store. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Data Store. CVSS 3.0 Base Score 3.3 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L).","status":"published","published":"2019-04-23T19:32:56.833Z","modified":"2026-06-17T02:34:25.64Z","cvss":[{"version":"3.0","score":3.3,"vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L","level":"low","assessor":"primary"},{"version":"2.0","score":2.1,"vector":"AV:L/AC:L/Au:N/C:N/I:N/A:P","level":"low","assessor":"primary"}],"updated_at":"2026-11-02T14:05:12.471695Z"}],"osv":[{"id":"AZL-34927","title":"CVE-2019-2708 affecting package libdb for versions less than 5.3.28-7","description":"Vulnerability in the Data Store component of Oracle Berkeley DB. Supported versions that are affected are Prior to 6.138, prior to 6.2.38 and prior to 18.1.32. Easily exploitable vulnerability allows low privileged attacker having Local Logon privilege with logon to the infrastructure where Data Store executes to compromise Data Store. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Data Store. CVSS 3.0 Base Score 3.3 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L).","status":"published","published":"2019-04-23T19:32:56Z","modified":"2026-11-05T05:40:51Z","cvss":[{"version":"3.0","score":3.3,"vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L","level":"low"}],"updated_at":"2026-11-05T16:41:19.380321Z"},{"id":"AZL-6630","title":"CVE-2019-2708 affecting package libdb for versions less than 5.3.28-7","description":"Vulnerability in the Data Store component of Oracle Berkeley DB. Supported versions that are affected are Prior to 6.138, prior to 6.2.38 and prior to 18.1.32. Easily exploitable vulnerability allows low privileged attacker having Local Logon privilege with logon to the infrastructure where Data Store executes to compromise Data Store. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Data Store. CVSS 3.0 Base Score 3.3 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L).","status":"published","published":"2019-04-23T19:32:56Z","modified":"2026-04-21T04:37:50.10118Z","cvss":[{"version":"3.0","score":3.3,"vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L","level":"low"}],"updated_at":"2026-11-02T15:28:08.354547Z"},{"id":"BELL-CVE-2019-2708","status":"published","published":"2019-04-23T19:32:00Z","modified":"2026-01-26T09:39:57.665609Z","cvss":[{"version":"3.0","score":3.3,"vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L","level":"low"}],"updated_at":"2026-11-02T15:28:15.340685Z"},{"id":"OESA-2021-1156","title":"libdb security update","description":"Oracle Berkeley DB provides the best open source embeddable databases allowing developers the choice of SQL, Key/Value, XML/XQuery or Java  Object storage for their data model. At its core is a fast, scalable,  transactional database engine with proven reliability and availability.  Berkeley DB comes three versions: Berkeley DB, Berkeley DB Java  Edition, and Berkeley DB XML.\r\n\r\nSecurity Fix(es):\r\n\r\nVulnerability in the Data Store component of Oracle Berkeley DB. Supported versions that are affected are Prior to 6.138, prior to 6.2.38 and prior to 18.1.32. Easily exploitable vulnerability allows low privileged attacker having Local Logon privilege with logon to the infrastructure where Data Store executes to compromise Data Store. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Data Store. CVSS 3.0 Base Score 3.3 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L).(CVE-2019-2708)","status":"published","published":"2021-05-06T11:04:23Z","modified":"2026-08-18T01:15:23.17829993Z","cvss":[{"version":"3.1","score":3.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L","level":"low"}],"updated_at":"2026-11-02T15:52:38.987987Z"},{"id":"RHSA-2021:1675","title":"Red Hat Security Advisory: libdb security update","status":"published","published":"2024-09-16T05:11:25Z","modified":"2026-08-05T10:08:48Z","cvss":[{"version":"3.1","score":3.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L","level":"low"}],"updated_at":"2026-11-02T15:53:08.071325Z"},{"id":"RLSA-2021:1675","title":"Low: libdb security update","description":"The libdb packages provide the Berkeley Database, an embedded database supporting both traditional and client/server applications.\n\nSecurity Fix(es):\n\n* libdb: Denial of service in the Data Store component (CVE-2019-2708)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the Rocky Linux 8.4 Release Notes linked from the References section.","status":"published","published":"2021-05-18T05:48:41Z","modified":"2026-02-05T11:45:04.546665Z","cvss":[{"version":"3.1","score":3.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L","level":"low"}],"updated_at":"2026-11-02T15:53:23.969672Z"},{"id":"ALSA-2021:1675","title":"Low: libdb security update","description":"The libdb packages provide the Berkeley Database, an embedded database supporting both traditional and client/server applications.\n\nSecurity Fix(es):\n\n* libdb: Denial of service in the Data Store component (CVE-2019-2708)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.","status":"published","published":"2021-05-18T05:48:41Z","modified":"2026-10-29T11:00:30.549445128Z","updated_at":"2026-11-02T15:27:51.196609Z"},{"id":"MGASA-2021-0057","title":"Updated db53 packages fix a security vulnerability","description":"Vulnerability in the Data Store component of Oracle Berkeley DB. Easily\nexploitable vulnerability allows low privileged attacker having Local Logon\nprivilege with logon to the infrastructure where Data Store executes to\ncompromise Data Store. Successful attacks of this vulnerability can result in\nunauthorized ability to cause a partial denial of service (partial DOS) of Data\nStore (CVE-2019-2708).\n","status":"published","published":"2021-01-29T19:05:33Z","modified":"2026-04-16T04:43:31.609723392Z","updated_at":"2026-11-02T15:49:41.509337Z"},{"id":"openSUSE-SU-2024:14246-1","title":"db48-doc-4.8.30-45.1 on GA media","description":"These are all security issues fixed in the db48-doc-4.8.30-45.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-08-08T00:00:00Z","modified":"2026-02-04T03:11:05.926028Z","updated_at":"2026-11-02T16:58:36.662953Z"},{"id":"SUSE-SU-2022:4214-1","title":"Security update for libdb-4_8","description":"This update for libdb-4_8 fixes the following issues:\n\n- CVE-2019-2708: Fixed partial DoS due to data store execution (bsc#1174414).\n","status":"published","published":"2022-11-24T15:18:02Z","modified":"2026-02-04T03:19:34.289503Z","updated_at":"2026-11-02T15:53:51.440565Z"},{"id":"SUSE-SU-2022:4289-1","title":"Security update for libdb-4_8","description":"This update for libdb-4_8 fixes the following issues:\n\n- CVE-2019-2708: Fixed partial DoS due to data store execution (bsc#1174414).\n","status":"published","published":"2022-11-29T14:59:09Z","modified":"2026-02-04T04:20:23.035999Z","updated_at":"2026-11-02T15:53:51.853735Z"},{"id":"SUSE-SU-2025:20067-1","title":"Security update for libdb-4_8","description":"This update for libdb-4_8 fixes the following issues:\n\nCVE-2019-2708: Fixed data store execution leading to partial DoS (bsc#1174414)\n\nChanges:\n\n* libdb: Data store execution leads to partial DoS\n* Backport the upsteam commits:\n\n  - Fixed several possible crashes when running db_verify\n    on a corrupted database. [#27864]\n  - Fixed several possible hangs when running db_verify\n    on a corrupted database. [#27864]\n  - Added a warning message when attempting to verify a queue\n    database which has many extent files. Verification will take\n    a long time if there are many extent files. [#27864]\n\n","status":"published","published":"2025-02-03T09:01:29Z","modified":"2026-03-23T04:47:07.363048Z","updated_at":"2026-11-02T15:53:59.381172Z"}]}}