NetSight
IP …
high7.0Public exploit code

CVE-2016-6663

Race condition in Oracle MySQL before 5.5.52, 5.6.x before 5.6.33, 5.7.x before 5.7.15, and 8.x before 8.0.1; MariaDB before 5.5.52, 10.0.x before 10.0.28, and…

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

Impact

Race condition in Oracle MySQL before 5.5.52, 5.6.x before 5.6.33, 5.7.x before 5.7.15, and 8.x before 8.0.1; MariaDB before 5.5.52, 10.0.x before 10.0.28, and 10.1.x before 10.1.18; Percona Server before 5.5.51-38.2, 5.6.x before 5.6.32-78-1, and 5.7.x before 5.7.14-8; and Percona XtraDB Cluster before 5.5.41-37.0, 5.6.x before 5.6.32-25.17, and 5.7.x before 5.7.14-26.17 allows local users with certain permissions to gain privileges by leveraging use of my_copystat by REPAIR TABLE to repair a MyISAM table.

Affected products

VendorProductAffected versions
OracleMysql
from 5.5.0 through 5.5.52
from 5.6.0 through 5.6.33
from 5.7.0 through 5.7.15
Version 8.0
PerconaPercona Server
from 5.5 before 5.5.51-38.2
from 5.6 before 5.6.32-78.1
from 5.7 before 5.7.14-8
PerconaXtradb Cluster
from 5.5 before 5.5.41-37.0
from 5.6 before 5.6.32-25.17
from 5.7 before 5.7.14-26.17
MariadbMariadb
from 5.5.20 before 5.5.52
from 10.0.0 before 10.0.28
from 10.1.0 before 10.1.18

Weakness classification

CWE-362

References