CRITICAL✓ PATCH🇬🇧 English

CVE-2016-6662

CVSS 9.8v3.0pub. 2016-09-20upd. 2026-05-06

Oracle MySQL through 5.5.52, 5.6.x through 5.6.33, and 5.7.x through 5.7.15; MariaDB before 5.5.51, 10.0.x before 10.0.27, and 10.1.x before 10.1.17; and Percona Server before 5.5.51-38.1, 5.6.x before 5.6.32-78.0, and 5.7.x before 5.7.14-7 allow local users to create arbitrary configurations and bypass certain protection mechanisms by setting general_log_file to a my.cnf configuration. NOTE: this can be leveraged to execute arbitrary code with root privileges by setting malloc_lib. NOTE: the affected MySQL version information is from Oracle's October 2016 CPU. Oracle has not commented on third-party claims that the issue was silently patched in MySQL 5.5.52, 5.6.33, and 5.7.15.

oryginał EN

CVSS Vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Debian
OS
Debian
8.0
MariaDB
APP
Mariadb
10.1.0 – 10.1.17 (bez)10.0.0 – 10.0.27 (bez)5.5.20 – 5.5.51 (bez)
Oracle MySQL
APP
Oracle
5.5.0 – 5.5.525.6.0 – 5.6.335.7.0 – 5.7.15
Percona Server
APP
Percona
5.7 – 5.7.14-7 (bez)5.6 – 5.6.32-78.0 (bez)5.5 – 5.5.51-38.1 (bez)
Red Hat Enterprise Linux
OS
Redhat
7.0
Red Hat Enterprise Linux Desktop
OS
Redhat
6.07.0
Red Hat Enterprise Linux Server
OS
Redhat
6.0
Red Hat Enterprise Linux Server Aus
OS
Redhat
7.37.47.6
Red Hat Enterprise Linux Server Eus
OS
Redhat
7.37.47.57.6
Red Hat Enterprise Linux Server Tus
OS
Redhat
7.37.6
Red Hat Enterprise Linux Workstation
OS
Redhat
6.07.0
Red Hat Openstack
APP
Redhat
5.06.07.089