CVE-2016-6662 Oracle MySQL through 5.5.52, 5.6.x through 5.6.33, and 5.7.x through 5.7.15; MariaDB before 5.5.51, 10.0.x before 10.0.27, and 10.1.x before 10.1.17; and Percona Server before 5.5.51-38.1, 5.6.x befor...
CriticalCVSS 9.8
EPSS 67.7%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Oracle MySQL through 5.5.52, 5.6.x through 5.6.33, and 5.7.x through 5.7.15; MariaDB before 5.5.51, 10.0.x before 10.0.27, and 10.1.x before 10.1.17; and Percona Server before 5.5.51-38.1, 5.6.x before 5.6.32-78.0, and 5.7.x before 5.7.14-7 allow local users to create arbitrary configurations and bypass certain protection mechanisms by setting general_log_file to a my.cnf configuration. NOTE: this can be leveraged to execute arbitrary code with root privileges by setting malloc_lib. NOTE: the affected MySQL version information is from Oracle's October 2016 CPU. Oracle has not commented on third-party claims that the issue was silently patched in MySQL 5.5.52, 5.6.33, and 5.7.15.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| oracle MySQL | >= 5.5.0, <= 5.5.52 | No fix listed |
| oracle MySQL | >= 5.6.0, <= 5.6.33 | No fix listed |
| oracle MySQL | >= 5.7.0, <= 5.7.15 | No fix listed |
| percona server | >= 5.5, < 5.5.51-38.1 | 5.5.51-38.1 |
| percona server | >= 5.6, < 5.6.32-78.0 | 5.6.32-78.0 |
| percona server | >= 5.7, < 5.7.14-7 | 5.7.14-7 |
| MariaDB Server | >= 5.5.20, < 5.5.51 | 5.5.51 |
| MariaDB Server | >= 10.0.0, < 10.0.27 | 10.0.27 |
| MariaDB Server | >= 10.1.0, < 10.1.17 | 10.1.17 |
| debian linux | = 8.0 | No fix listed |
| redhat openstack | = 5.0 | No fix listed |
| redhat openstack | = 6.0 | No fix listed |
| redhat openstack | = 7.0 | No fix listed |
| redhat openstack | = 8 | No fix listed |
| redhat openstack | = 9 | No fix listed |
| redhat enterprise linux | = 7.0 | No fix listed |
| redhat enterprise linux desktop | = 6.0 | No fix listed |
| redhat enterprise linux desktop | = 7.0 | No fix listed |
| redhat enterprise linux server | = 6.0 | No fix listed |
| redhat enterprise linux server aus | = 7.3 | No fix listed |
| redhat enterprise linux server aus | = 7.4 | No fix listed |
| redhat enterprise linux server aus | = 7.6 | No fix listed |
| redhat enterprise linux server eus | = 7.3 | No fix listed |
| redhat enterprise linux server eus | = 7.4 | No fix listed |
| redhat enterprise linux server eus | = 7.5 | No fix listed |
Show 7 more
| Product | Affected versions | Fixed in |
|---|---|---|
| redhat enterprise linux server eus | = 7.6 | No fix listed |
| redhat enterprise linux server tus | = 7.3 | No fix listed |
| redhat enterprise linux server tus | = 7.6 | No fix listed |
| redhat enterprise linux workstation | = 6.0 | No fix listed |
| redhat enterprise linux workstation | = 7.0 | No fix listed |
| alpine/mariadb(Alpine:v3.2) | >= 5.5.20, < 5.5.51-r0 | 5.5.51-r0 |
| alpine/mariadb(Alpine:v3.3) | >= 5.5.20, < 10.1.17-r0 | 10.1.17-r0 |
References
- legalhackers.com third-party-advisory
- RHSA-2016:2058 third-party-advisory vendor-advisory
- RHSA-2016:2059 third-party-advisory vendor-advisory
- RHSA-2016:2060 third-party-advisory vendor-advisory
- RHSA-2016:2061 third-party-advisory vendor-advisory
- RHSA-2016:2062 third-party-advisory vendor-advisory
- RHSA-2016:2077 third-party-advisory vendor-advisory
- RHSA-2016:2130 third-party-advisory vendor-advisory
- RHSA-2016:2131 third-party-advisory vendor-advisory
- RHSA-2016:2595 third-party-advisory vendor-advisory
- RHSA-2016:2749 third-party-advisory vendor-advisory
- RHSA-2016:2927 third-party-advisory vendor-advisory
- RHSA-2016:2928 third-party-advisory vendor-advisory
- RHSA-2017:0184 third-party-advisory vendor-advisory
- 20160912 CVE-2016-6662 - MySQL Remote Root Code Execution / Privilege Escalation ( 0day ) mailing-list third-party-advisory
- DSA-3666 third-party-advisory vendor-advisory
- [oss-security] 20160912 CVE-2016-6662 - MySQL Remote Root Code Execution / Privilege Escalation ( 0day ) mailing-list third-party-advisory
- www.oracle.com patch vendor-advisory
- 92912 third-party-advisory vdb-entry
- 1036769 third-party-advisory vdb-entry
- jira.mariadb.org issue-tracking vendor-advisory
- mariadb.com release-notes vendor-advisory
- mariadb.com release-notes vendor-advisory
- mariadb.com release-notes vendor-advisory
- GLSA-201701-01 third-party-advisory vendor-advisory
- 40360 exploit third-party-advisory vdb-entry
- www.percona.com third-party-advisory
- security.alpinelinux.org vendor-advisory