NetSight
IP …
critical9.8Public exploit code

CVE-2016-6662

Oracle MySQL through 5.5.52, 5.6.x through 5.6.33, and 5.7.x through 5.7.15; MariaDB before 5.5.51, 10.0.x before 10.0.27, and 10.1.x before 10.1.17; and Perco…

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

Impact

Oracle MySQL through 5.5.52, 5.6.x through 5.6.33, and 5.7.x through 5.7.15; MariaDB before 5.5.51, 10.0.x before 10.0.27, and 10.1.x before 10.1.17; and Percona Server before 5.5.51-38.1, 5.6.x before 5.6.32-78.0, and 5.7.x before 5.7.14-7 allow local users to create arbitrary configurations and bypass certain protection mechanisms by setting general_log_file to a my.cnf configuration. NOTE: this can be leveraged to execute arbitrary code with root privileges by setting malloc_lib. NOTE: the affected MySQL version information is from Oracle's October 2016 CPU. Oracle has not commented on third-party claims that the issue was silently patched in MySQL 5.5.52, 5.6.33, and 5.7.15.

Affected products

VendorProductAffected versions
OracleMysql
from 5.5.0 through 5.5.52
from 5.6.0 through 5.6.33
from 5.7.0 through 5.7.15
PerconaPercona Server
from 5.5 before 5.5.51-38.1
from 5.6 before 5.6.32-78.0
from 5.7 before 5.7.14-7
MariadbMariadb
from 5.5.20 before 5.5.51
from 10.0.0 before 10.0.27
from 10.1.0 before 10.1.17
DebianDebian Linux
Version 8.0
RedhatOpenstack
Versions 5.0, 6.0, 7.0, 8, 9
RedhatEnterprise Linux
Version 7.0
RedhatEnterprise Linux Desktop
Versions 6.0, 7.0
RedhatEnterprise Linux Server
Version 6.0
RedhatEnterprise Linux Server Aus
Versions 7.3, 7.4, 7.6
RedhatEnterprise Linux Server Eus
Versions 7.3, 7.4, 7.5, 7.6
RedhatEnterprise Linux Server Tus
Versions 7.3, 7.6
RedhatEnterprise Linux Workstation
Versions 6.0, 7.0

Weakness classification

CWE-264

References