kritisch
CVE-2016-6662
mysql: general_log can write to configuration files, leading to privilege escalation (CPU Oct 2016)
In der Trivy Database seit spätestens 24. Okt. 2026, 07:11 UTCWann der Eintrag vor diesem Build hinzukam, ist nicht erfasst.
Einstufung nach Quelle
NVD9.8CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Red Hat9.8CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Trivys eigenes Label ist CRITICAL. Kritisch laut NVD. Niedriger laut Red Hat (hoch), Amazon (hoch), Oracle (hoch), Ubuntu (mittel).
Beschreibung
Oracle MySQL through 5.5.52, 5.6.x through 5.6.33, and 5.7.x through 5.7.15; MariaDB before 5.5.51, 10.0.x before 10.0.27, and 10.1.x before 10.1.17; and Percona Server before 5.5.51-38.1, 5.6.x before 5.6.32-78.0, and 5.7.x before 5.7.14-7 allow local users to create arbitrary configurations and bypass certain protection mechanisms by setting general_log_file to a my.cnf configuration. NOTE: this can be leveraged to execute arbitrary code with root privileges by setting malloc_lib. NOTE: the affected MySQL version information is from Oracle's October 2016 CPU. Oracle has not commented on third-party claims that the issue was silently patched in MySQL 5.5.52, 5.6.33, and 5.7.15.
Betroffene Pakete und behobene Versionen
| Quelle | Paket | Behoben in |
|---|---|---|
| alpine 3.2 | mariadb | 5.5.51-r0 |
| alpine 3.3 | mariadb | 10.1.17-r0 |
| amazon linux 1 | mysql-config, mysql51, mysql51-bench und 28 weitere | 5.5.52-1.13.amzn1 und 2 weitere |
| debian 7 | mysql-5.5 | 5.5.52-0+deb7u1 |
| debian 8 | mariadb-10.0, mysql-5.5 | 10.0.27-0+deb8u1 und 1 weitere |
| Oracle Linux 6 | mysql, mysql-bench, mysql-devel und 5 weitere | 5.1.73-8.0.1.el6_8 |
| Oracle Linux 7 | mariadb, mariadb-bench, mariadb-devel und 5 weitere | 1:5.5.52-1.el7 |
| ubuntu 12.04 | mysql-5.5 | 5.5.52-0ubuntu0.12.04.1 |
| ubuntu 14.04 | mariadb-5.5, mysql-5.5, mysql-5.6 | 5.5.52-1ubuntu0.14.04.1 und 2 weitere |
| ubuntu 14.04-ESM | mysql-5.5 | 5.5.52-0ubuntu0.14.04.1 |
| ubuntu 16.04 | mariadb-10.0, mysql-5.7, percona-xtradb-cluster-5.6 | 10.0.27-0ubuntu0.16.04.1 und 2 weitere |
| ubuntu 16.04-ESM | mariadb-10.0, mysql-5.7, percona-xtradb-cluster-5.6 | 10.0.27-0ubuntu0.16.04.1 und 2 weitere |
Alle 72 Einträge aus 19 Quellen zeigen
| Quelle | Paket | Behoben in |
|---|---|---|
| alpine 3.2 | mariadb | 5.5.51-r0 |
| alpine 3.3 | mariadb | 10.1.17-r0 |
| amazon linux 1 | mysql-config | 5.5.52-1.13.amzn1 |
| amazon linux 1 | mysql51 | 5.1.73-8.72.amzn1 |
| amazon linux 1 | mysql51-bench | 5.1.73-8.72.amzn1 |
| amazon linux 1 | mysql51-common | 5.1.73-8.72.amzn1 |
| amazon linux 1 | mysql51-debuginfo | 5.1.73-8.72.amzn1 |
| amazon linux 1 | mysql51-devel | 5.1.73-8.72.amzn1 |
| amazon linux 1 | mysql51-embedded | 5.1.73-8.72.amzn1 |
| amazon linux 1 | mysql51-embedded-devel | 5.1.73-8.72.amzn1 |
| amazon linux 1 | mysql51-libs | 5.1.73-8.72.amzn1 |
| amazon linux 1 | mysql51-server | 5.1.73-8.72.amzn1 |
| amazon linux 1 | mysql51-test | 5.1.73-8.72.amzn1 |
| amazon linux 1 | mysql55 | 5.5.52-1.13.amzn1 |
| amazon linux 1 | mysql55-bench | 5.5.52-1.13.amzn1 |
| amazon linux 1 | mysql55-debuginfo | 5.5.52-1.13.amzn1 |
| amazon linux 1 | mysql55-devel | 5.5.52-1.13.amzn1 |
| amazon linux 1 | mysql55-embedded | 5.5.52-1.13.amzn1 |
| amazon linux 1 | mysql55-embedded-devel | 5.5.52-1.13.amzn1 |
| amazon linux 1 | mysql55-libs | 5.5.52-1.13.amzn1 |
| amazon linux 1 | mysql55-server | 5.5.52-1.13.amzn1 |
| amazon linux 1 | mysql55-test | 5.5.52-1.13.amzn1 |
| amazon linux 1 | mysql56 | 5.6.33-1.21.amzn1 |
| amazon linux 1 | mysql56-bench | 5.6.33-1.21.amzn1 |
| amazon linux 1 | mysql56-common | 5.6.33-1.21.amzn1 |
| amazon linux 1 | mysql56-debuginfo | 5.6.33-1.21.amzn1 |
| amazon linux 1 | mysql56-devel | 5.6.33-1.21.amzn1 |
| amazon linux 1 | mysql56-embedded | 5.6.33-1.21.amzn1 |
| amazon linux 1 | mysql56-embedded-devel | 5.6.33-1.21.amzn1 |
| amazon linux 1 | mysql56-errmsg | 5.6.33-1.21.amzn1 |
| amazon linux 1 | mysql56-libs | 5.6.33-1.21.amzn1 |
| amazon linux 1 | mysql56-server | 5.6.33-1.21.amzn1 |
| amazon linux 1 | mysql56-test | 5.6.33-1.21.amzn1 |
| debian 7 | mysql-5.5 | 5.5.52-0+deb7u1 |
| debian 8 | mariadb-10.0 | 10.0.27-0+deb8u1 |
| debian 8 | mysql-5.5 | 5.5.52-0+deb8u1 |
| Oracle Linux 6 | mysql | 5.1.73-8.0.1.el6_8 |
| Oracle Linux 6 | mysql-bench | 5.1.73-8.0.1.el6_8 |
| Oracle Linux 6 | mysql-devel | 5.1.73-8.0.1.el6_8 |
| Oracle Linux 6 | mysql-embedded | 5.1.73-8.0.1.el6_8 |
| Oracle Linux 6 | mysql-embedded-devel | 5.1.73-8.0.1.el6_8 |
| Oracle Linux 6 | mysql-libs | 5.1.73-8.0.1.el6_8 |
| Oracle Linux 6 | mysql-server | 5.1.73-8.0.1.el6_8 |
| Oracle Linux 6 | mysql-test | 5.1.73-8.0.1.el6_8 |
| Oracle Linux 7 | mariadb | 1:5.5.52-1.el7 |
| Oracle Linux 7 | mariadb-bench | 1:5.5.52-1.el7 |
| Oracle Linux 7 | mariadb-devel | 1:5.5.52-1.el7 |
| Oracle Linux 7 | mariadb-embedded | 1:5.5.52-1.el7 |
| Oracle Linux 7 | mariadb-embedded-devel | 1:5.5.52-1.el7 |
| Oracle Linux 7 | mariadb-libs | 1:5.5.52-1.el7 |
| Oracle Linux 7 | mariadb-server | 1:5.5.52-1.el7 |
| Oracle Linux 7 | mariadb-test | 1:5.5.52-1.el7 |
| ubuntu 12.04 | mysql-5.5 | 5.5.52-0ubuntu0.12.04.1 |
| ubuntu 14.04 | mariadb-5.5 | 5.5.52-1ubuntu0.14.04.1 |
| ubuntu 14.04 | mysql-5.5 | 5.5.52-0ubuntu0.14.04.1 |
| ubuntu 14.04 | mysql-5.6 | 5.6.33-0ubuntu0.14.04.1 |
| ubuntu 14.04-ESM | mysql-5.5 | 5.5.52-0ubuntu0.14.04.1 |
| ubuntu 16.04 | mariadb-10.0 | 10.0.27-0ubuntu0.16.04.1 |
| ubuntu 16.04 | mysql-5.7 | 5.7.15-0ubuntu0.16.04.1 |
| ubuntu 16.04 | percona-xtradb-cluster-5.6 | 5.6.34-26.19-0ubuntu0.16.04.1 |
| ubuntu 16.04-ESM | mariadb-10.0 | 10.0.27-0ubuntu0.16.04.1 |
| ubuntu 16.04-ESM | mysql-5.7 | 5.7.15-0ubuntu0.16.04.1 |
| ubuntu 16.04-ESM | percona-xtradb-cluster-5.6 | 5.6.34-26.19-0ubuntu0.16.04.1 |
| ubuntu 16.10 | mariadb-10.0 | 10.0.28-0ubuntu0.16.10.1 |
| ubuntu 16.10 | mysql-5.7 | 5.7.15-0ubuntu2 |
| ubuntu 16.10 | percona-xtradb-cluster-5.6 | 5.6.34-26.19-0ubuntu0.16.10.1 |
| ubuntu 17.04 | mysql-5.7 | 5.7.15-0ubuntu2 |
| ubuntu 17.10 | mysql-5.7 | 5.7.15-0ubuntu2 |
| ubuntu 18.04 | mysql-5.7 | 5.7.15-0ubuntu2 |
| ubuntu 18.04-ESM | mysql-5.7 | 5.7.15-0ubuntu2 |
| ubuntu 18.10 | mysql-5.7 | 5.7.15-0ubuntu2 |
| ubuntu 19.04 | mysql-5.7 | 5.7.15-0ubuntu2 |
Referenzen
- http://legalhackers.com/advisories/MySQL-Exploit-Remote-Root-Code-Execution-Privesc-CVE-2016-6662.html
- http://rhn.redhat.com/errata/RHSA-2016-2058.html
- http://rhn.redhat.com/errata/RHSA-2016-2059.html
- http://rhn.redhat.com/errata/RHSA-2016-2060.html
- http://rhn.redhat.com/errata/RHSA-2016-2061.html
- http://rhn.redhat.com/errata/RHSA-2016-2062.html
- http://rhn.redhat.com/errata/RHSA-2016-2077.html
- http://rhn.redhat.com/errata/RHSA-2016-2130.html
Alle 34 Referenzen
- http://rhn.redhat.com/errata/RHSA-2016-2131.html
- http://rhn.redhat.com/errata/RHSA-2016-2595.html
- http://rhn.redhat.com/errata/RHSA-2016-2749.html
- http://rhn.redhat.com/errata/RHSA-2016-2927.html
- http://rhn.redhat.com/errata/RHSA-2016-2928.html
- http://rhn.redhat.com/errata/RHSA-2017-0184.html
- http://seclists.org/fulldisclosure/2016/Sep/23
- http://www.debian.org/security/2016/dsa-3666
- http://www.openwall.com/lists/oss-security/2016/09/12/3
- http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html
- http://www.securityfocus.com/bid/92912
- http://www.securitytracker.com/id/1036769
- https://access.redhat.com/security/cve/CVE-2016-6662
- https://jira.mariadb.org/browse/MDEV-10465
- https://legalhackers.com/advisories/MySQL-Exploit-Remote-Root-Code-Execution-Privesc-CVE-2016-6662.txt
- https://linux.oracle.com/cve/CVE-2016-6662.html
- https://linux.oracle.com/errata/ELSA-2017-0184.html
- https://mariadb.com/kb/en/mariadb/mariadb-10027-release-notes/
- https://mariadb.com/kb/en/mariadb/mariadb-10117-release-notes/
- https://mariadb.com/kb/en/mariadb/mariadb-5551-release-notes/
- https://nvd.nist.gov/vuln/detail/CVE-2016-6662
- https://security.gentoo.org/glsa/201701-01
- https://ubuntu.com/security/notices/USN-3078-1
- https://www.cve.org/CVERecord?id=CVE-2016-6662
- https://www.exploit-db.com/exploits/40360/
- https://www.percona.com/blog/2016/09/12/percona-server-critical-update-cve-2016-6662/