CVE-2017-10140

Severity: high (CVSS 7.8 v3.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.5% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2018-04-16 · updated 2026-06-17

Description

Postfix before 2.11.10, 3.0.x before 3.0.10, 3.1.x before 3.1.6, and 3.2.x before 3.2.2 might allow local users to gain privileges by leveraging undocumented functionality in Berkeley DB 2.x and later, related to reading settings from DB_CONFIG in the current directory.

Affected products

Postfix: before 2.11.10; from 3.0.0 before 3.0.10; from 3.1.0 before 3.1.6; from 3.2.0 before 3.2.2 — fixed in 2.11.10, 3.0.10, 3.1.6, 3.2.2

How to fix

Upgrade to a fixed version: Postfix 2.11.10, 3.0.10, 3.1.6, 3.2.2. Check the vendor advisory for mitigations.

References

http://seclists.org/oss-sec/2017/q3/285
http://www.postfix.org/announcements/postfix-3.2.2.html
https://access.redhat.com/errata/RHSA-2019:0366
https://www.oracle.com/security-alerts/cpujul2020.html
http://seclists.org/oss-sec/2017/q3/285
http://www.postfix.org/announcements/postfix-3.2.2.html
https://access.redhat.com/errata/RHSA-2019:0366
https://www.oracle.com/security-alerts/cpujul2020.html

Get alerted when CVE-2017-10140 or the next vulnerability affects your stack