NetSight
IP …
high7.0Public exploit code

CVE-2016-6664

mysqld_safe in Oracle MySQL through 5.5.51, 5.6.x through 5.6.32, and 5.7.x through 5.7.14; MariaDB; Percona Server before 5.5.51-38.2, 5.6.x before 5.6.32-78-…

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

Impact

mysqld_safe in Oracle MySQL through 5.5.51, 5.6.x through 5.6.32, and 5.7.x through 5.7.14; MariaDB; Percona Server before 5.5.51-38.2, 5.6.x before 5.6.32-78-1, and 5.7.x before 5.7.14-8; and Percona XtraDB Cluster before 5.5.41-37.0, 5.6.x before 5.6.32-25.17, and 5.7.x before 5.7.14-26.17, when using file-based logging, allows local users with access to the mysql account to gain root privileges via a symlink attack on error logs and possibly other files.

Affected products

VendorProductAffected versions
OracleMysql
from 5.5.0 through 5.5.51
from 5.6.0 through 5.6.32
from 5.7.0 through 5.7.14
MariadbMariadb
from 5.5.0 before 5.5.54
from 10.0.0 before 10.0.29
from 10.1.0 before 10.1.21
PerconaPercona Server
from 5.5 before 5.5.51-38.2
from 5.6 before 5.6.32-78.1
from 5.7 before 5.7.14-8
PerconaXtradb Cluster
from 5.5 before 5.5.41-37.0
from 5.6 before 5.6.32-25.17
from 5.7 before 5.7.14-26.17

Weakness classification

CWE-59

References