Vulnerability Database

308,379

Total vulnerabilities in the database

CVE-2017-10140

Postfix before 2.11.10, 3.0.x before 3.0.10, 3.1.x before 3.1.6, and 3.2.x before 3.2.2 might allow local users to gain privileges by leveraging undocumented functionality in Berkeley DB 2.x and later, related to reading settings from DB_CONFIG in the current directory.

Published: Apr 16, 2018
Updated: Nov 9, 2025
CVE: CVE-2017-10140
Severity: Low
Exploit:

CVSS v2:

Severity: Low
Score: 4.6
AV:L/AC:L/Au:N/C:P/I:P/A:P

No CWE or OWASP classifications available.

Affected Software
References

Software	From	Fixed in
postfix / postfix	3.2.0	3.2.2
postfix / postfix	3.1.0	3.1.6
postfix / postfix	3.0.0	3.0.10
postfix / postfix	-	2.11.10

http://seclists.org/oss-sec/2017/q3/285
http://www.postfix.org/announcements/postfix-3.2.2.html
https://access.redhat.com/errata/RHSA-2019:0366
https://www.oracle.com/security-alerts/cpujul2020.html

Deep Security Visibility Without the Complexity

SynScan provides clear, real-time security insights so you can monitor your attack surface, spot risks early, and act fast—without extra complexity.

No setup fees
5-min deployment
Cancel anytime

Book a Demo