CVE-2017-10140

HIGH · CVSS 7.8 EPSS 0.57%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2018-04-16 · Last synced 2026-08-04

Field Assessment

AI analysis pending.

CVE

CVE-2017-10140

Severity

HIGH

CVSS

7.8

EPSS

0.57%

Original Filing — NVD Description

Postfix before 2.11.10, 3.0.x before 3.0.10, 3.1.x before 3.1.6, and 3.2.x before 3.2.2 might allow local users to gain privileges by leveraging undocumented functionality in Berkeley DB 2.x and later, related to reading settings from DB_CONFIG in the current directory.