Predictive Vulnerability Intelligence.

Product

  • Product
  • Pricing
  • Documentation

Company

  • About
  • Partnerships
  • Blog
  • Support

Legal

  • Terms
  • Privacy
  • Data Licensing

© 2026 FAUCET Technologies LLC. All rights reserved.

CVE-2019-2708

15
FAUCET Score

CVE-2019-2708 is a low-severity vulnerability affecting Oracle Berkeley DB versions prior to 6.1.38, 6.2.38, and 18.1.32. This flaw, residing in the Data Store component, allows a low-privileged local attacker to cause a partial denial of service. With a CVSS 3.0 score of 3.3, the attack requires local logon privileges and results only in availability impacts. There is no known public exploit code, Metasploit modules, or Nuclei templates, and the vulnerability has received no community discussion or media coverage, indicating a low likelihood of active exploitation.

Impacted Technologies

VendorProductVersion(s)CPE
< 6.138CPE matchmatch criteria
cpe:2.3:a:oracle:berkeley_db:*:*:*:*:*:*:*:*
< 18.1.32CPE match
cpe:2.3:a:oracle:oracle_berkeley_db:*:*:*:*:*:*:*:*
< 6.138CPE match
cpe:2.3:a:oracle:oracle_berkeley_db:*:*:*:*:*:*:*:*
< 6.2.38CPE match
cpe:2.3:a:oracle:oracle_berkeley_db:*:*:*:*:*:*:*:*

CVSS Data

CVSS version used by this source: 3.0

3.3LOW

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L

Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
LOW
Exploitability Score
1.8
Impact Score
1.4
CvssVersion
3.0

Exploit Intelligence

EPSS Score
0.60%
Probability of exploitation in next 30 days
EPSS Percentile
45.3%
Percentile rank of EPSS score among Peer Group
As of 2026-07-27
Model: v2026.06.15
This CVE's current EPSS score of 0.0060 is in the 96th percentile among its peer group of 1,511 CVEs.

Social Chatter

The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.1 Bluesky, 0.0 Mastodon, and 0.1 GitHub mentions.

Media Mentions

No media coverage found for this CVE.

The average CVE in this peer group has 0.0 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.

Remediation

Patch Available

Vendor Patches (68)

microsoftpatch availablevia msrc
Product: libdb-utils-5.3.28-8.azl3.aarch64.rpm on Azure Linux 3.0 ARMFixed in: 5.3.28-8
microsoftpatch availablevia msrc
Product: 19212-17084Fixed in: 5.3.28-7
microsoftpatch availablevia msrc
Product: 16911-16823Fixed in: 5.3.28-7
microsoftpatch availablevia msrc
Product: 16912-16817Fixed in: 5.3.28-7
microsoftpatch availablevia msrc
Product: 16912-17084Fixed in: 5.3.28-7
microsoftpatch availablevia msrc
Product: 17061-16820Fixed in: 5.3.28-6
microsoftpatch availablevia msrc
Product: libdb-5.3.28-8.azl3.aarch64.rpm on Azure Linux 3.0 ARMFixed in: 5.3.28-8
microsoftpatch availablevia msrc
Product: libdb-devel-5.3.28-8.azl3.aarch64.rpm on Azure Linux 3.0 ARMFixed in: 5.3.28-8
microsoftpatch availablevia msrc
Product: libdb-docs-5.3.28-8.azl3.aarch64.rpm on Azure Linux 3.0 ARMFixed in: 5.3.28-8
microsoftpatch availablevia msrc
Product: azl3 libdb 5.3.28-9 on Azure Linux 3.0Fixed in: 5.3.28-7
microsoftpatch availablevia msrc
Product: cbl2 libdb 5.3.28-7 on CBL Mariner 2.0Fixed in: 5.3.28-7
microsoftpatch availablevia msrc
Product: azl3 libdb 5.3.28-7 on Azure Linux 3.0Fixed in: 5.3.28-7
microsoftpatch availablevia msrc
Product: cm1 libdb 5.3.28-6 on CBL Mariner 1.0Fixed in: 5.3.28-6
microsoftpatch availablevia msrc
Product: 14753-12138Fixed in: 5.3.28-6
microsoftpatch availablevia msrc
Product: 14754-12138Fixed in: 5.3.28-6
microsoftpatch availablevia msrc
Product: 14730-12139Fixed in: 5.3.28-7
microsoftpatch availablevia msrc
Product: 14731-12139Fixed in: 5.3.28-7
microsoftpatch availablevia msrc
Product: 14732-12139Fixed in: 5.3.28-7
microsoftpatch availablevia msrc
Product: 14733-12139Fixed in: 5.3.28-7
microsoftpatch availablevia msrc
Product: 14734-12140Fixed in: 5.3.28-7
microsoftpatch availablevia msrc
Product: 14735-12140Fixed in: 5.3.28-7
microsoftpatch availablevia msrc
Product: 14737-12140Fixed in: 5.3.28-7
microsoftpatch availablevia msrc
Product: 14738-12140Fixed in: 5.3.28-7
microsoftpatch availablevia msrc
Product: 14739-12356Fixed in: 5.3.28-8
microsoftpatch availablevia msrc
Product: 14741-12356Fixed in: 5.3.28-8
microsoftpatch availablevia msrc
Product: 14742-12356Fixed in: 5.3.28-8
microsoftpatch availablevia msrc
Product: 14743-12357Fixed in: 5.3.28-8
microsoftpatch availablevia msrc
Product: 14744-12357Fixed in: 5.3.28-8
microsoftpatch availablevia msrc
Product: 14745-12357Fixed in: 5.3.28-8
microsoftpatch availablevia msrc
Product: 14746-12357Fixed in: 5.3.28-8
microsoftpatch availablevia msrc
Product: 14747-12137Fixed in: 5.3.28-6
microsoftpatch availablevia msrc
Product: 14748-12137Fixed in: 5.3.28-6
microsoftpatch availablevia msrc
Product: 14749-12137Fixed in: 5.3.28-6
microsoftpatch availablevia msrc
Product: 14750-12137Fixed in: 5.3.28-6
microsoftpatch availablevia msrc
Product: 14751-12138Fixed in: 5.3.28-6
microsoftpatch availablevia msrc
Product: 14752-12138Fixed in: 5.3.28-6
microsoftpatch availablevia msrc
Product: 14729-12139Fixed in: 5.3.28-7
microsoftpatch availablevia msrc
Product: 14736-12140Fixed in: 5.3.28-7
microsoftpatch availablevia msrc
Product: 14740-12356Fixed in: 5.3.28-8
microsoftpatch availablevia msrc
Product: CBL Mariner 1.0 x64Fixed in: 5.3.28-6
microsoftpatch availablevia msrc
Product: CBL Mariner 1.0 ARMFixed in: 5.3.28-6
microsoftpatch availablevia msrc
Product: CBL Mariner 2.0 x64Fixed in: 5.3.28-7
microsoftpatch availablevia msrc
Product: CBL Mariner 2.0 ARMFixed in: 5.3.28-7
microsoftpatch availablevia msrc
Product: libdb-5.3.28-6.cm1.x86_64.rpm on CBL Mariner 1.0 x64Fixed in: 5.3.28-6
microsoftpatch availablevia msrc
Product: libdb-devel-5.3.28-6.cm1.x86_64.rpm on CBL Mariner 1.0 x64Fixed in: 5.3.28-6
microsoftpatch availablevia msrc
Product: libdb-docs-5.3.28-6.cm1.x86_64.rpm on CBL Mariner 1.0 x64Fixed in: 5.3.28-6
microsoftpatch availablevia msrc
Product: libdb-debuginfo-5.3.28-6.cm1.x86_64.rpm on CBL Mariner 1.0 x64Fixed in: 5.3.28-6
microsoftpatch availablevia msrc
Product: libdb-5.3.28-6.cm1.aarch64.rpm on CBL Mariner 1.0 ARMFixed in: 5.3.28-6
microsoftpatch availablevia msrc
Product: libdb-devel-5.3.28-6.cm1.aarch64.rpm on CBL Mariner 1.0 ARMFixed in: 5.3.28-6
microsoftpatch availablevia msrc
Product: libdb-docs-5.3.28-6.cm1.aarch64.rpm on CBL Mariner 1.0 ARMFixed in: 5.3.28-6
microsoftpatch availablevia msrc
Product: libdb-debuginfo-5.3.28-6.cm1.aarch64.rpm on CBL Mariner 1.0 ARMFixed in: 5.3.28-6
microsoftpatch availablevia msrc
Product: libdb-5.3.28-7.cm2.x86_64.rpm on CBL Mariner 2.0 x64Fixed in: 5.3.28-7
microsoftpatch availablevia msrc
Product: libdb-devel-5.3.28-7.cm2.x86_64.rpm on CBL Mariner 2.0 x64Fixed in: 5.3.28-7
microsoftpatch availablevia msrc
Product: libdb-docs-5.3.28-7.cm2.x86_64.rpm on CBL Mariner 2.0 x64Fixed in: 5.3.28-7
microsoftpatch availablevia msrc
Product: libdb-utils-5.3.28-7.cm2.x86_64.rpm on CBL Mariner 2.0 x64Fixed in: 5.3.28-7
microsoftpatch availablevia msrc
Product: libdb-debuginfo-5.3.28-7.cm2.x86_64.rpm on CBL Mariner 2.0 x64Fixed in: 5.3.28-7
microsoftpatch availablevia msrc
Product: libdb-5.3.28-7.cm2.aarch64.rpm on CBL Mariner 2.0 ARMFixed in: 5.3.28-7
microsoftpatch availablevia msrc
Product: libdb-devel-5.3.28-7.cm2.aarch64.rpm on CBL Mariner 2.0 ARMFixed in: 5.3.28-7
microsoftpatch availablevia msrc
Product: libdb-docs-5.3.28-7.cm2.aarch64.rpm on CBL Mariner 2.0 ARMFixed in: 5.3.28-7
microsoftpatch availablevia msrc
Product: libdb-utils-5.3.28-7.cm2.aarch64.rpm on CBL Mariner 2.0 ARMFixed in: 5.3.28-7
microsoftpatch availablevia msrc
Product: libdb-debuginfo-5.3.28-7.cm2.aarch64.rpm on CBL Mariner 2.0 ARMFixed in: 5.3.28-7
microsoftpatch availablevia msrc
Product: libdb-5.3.28-8.azl3.x86_64.rpm on Azure Linux 3.0 x64Fixed in: 5.3.28-8
microsoftpatch availablevia msrc
Product: libdb-devel-5.3.28-8.azl3.x86_64.rpm on Azure Linux 3.0 x64Fixed in: 5.3.28-8
microsoftpatch availablevia msrc
Product: libdb-docs-5.3.28-8.azl3.x86_64.rpm on Azure Linux 3.0 x64Fixed in: 5.3.28-8
microsoftpatch availablevia msrc
Product: libdb-utils-5.3.28-8.azl3.x86_64.rpm on Azure Linux 3.0 x64Fixed in: 5.3.28-8
oraclepatch availablevia nvd_reference
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 8Fixed in: libdb-0:5.3.28-40.el8
View patch
redhatvendor investigatingvia redhat_api
Product: Red Hat Enterprise Linux 7Fixed in: libdb

Vendor Advisories (4)

microsoft2024-Jun/CVE-2019-2708

CVE-2019-2708

Jun 11, 2024
microsoft2021-Jul/CVE-2019-2708

CVE-2019-2708

Jul 13, 2021
redhatCVE-2019-2708Low

libdb: Denial of service in the Data Store component

Apr 23, 2019
microsoft2019-Apr/CVE-2019-2708Low

Vulnerability in the Data Store component of Oracle Berkeley DB. Supported versions that are affected are Prior to 6.138 prior to 6.2.38 and prior to 18.1.32. Easily exploitable vulnerability allows low privileged attacker having Local Logon privilege with logon to the infrastructure where Data Store executes to compromise Data Store. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Data Store. CVSS 3.0 Base Score 3.3 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L).

Apr 9, 2019

References

lists.fedoraproject.org / archives/list/package-announce%40lists.fedoraproject.org/message/OQFKX6NKU2DCW5CTCHQSOJJDFVRVTPO6
oracle.com / technetwork/security-advisory/cpuapr2019-5072813.html
PatchVendor Advisory