Wind River Support Network

HomeDefectsLIN1024-5586
Fixed

LIN1024-5586 : Security Advisory - db - CVE-2019-2708

Created: Nov 25, 2024    Updated: Oct 13, 2025
Resolved Date: Oct 13, 2025
Found In Version: 10.24.33.1
Fix Version: 10.24.33.4
Severity: Standard
Applicable for: Wind River Linux LTS 24
Component/s: Userspace

Description

Vulnerability in the Data Store component of Oracle Berkeley DB. Supported versions that are affected are Prior to 6.138, prior to 6.2.38 and prior to 18.1.32. Easily exploitable vulnerability allows low privileged attacker having Local Logon privilege with logon to the infrastructure where Data Store executes to compromise Data Store. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Data Store. CVSS 3.0 Base Score 3.3 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L).

CREATE(Triage):(User=admin) CVE-2019-2708 (https://nvd.nist.gov/vuln/detail/CVE-2019-2708)

CVEs

  • Linkedin
  • Facebook
  • Twitter
  • Youtube