crítica
CVE-2016-6662
mysql: general_log can write to configuration files, leading to privilege escalation (CPU Oct 2016)
En la Trivy database desde, como mínimo, el 24 oct 2026, 07:11 UTCNo consta cuándo entró antes de ese build.
Severidad por fuente
NVD9.8CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Red Hat9.8CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
La etiqueta propia de Trivy es CRITICAL. Crítica según NVD. Más baja según Red Hat (alta), Amazon (alta), Oracle (alta), Ubuntu (media).
Descripción
Oracle MySQL through 5.5.52, 5.6.x through 5.6.33, and 5.7.x through 5.7.15; MariaDB before 5.5.51, 10.0.x before 10.0.27, and 10.1.x before 10.1.17; and Percona Server before 5.5.51-38.1, 5.6.x before 5.6.32-78.0, and 5.7.x before 5.7.14-7 allow local users to create arbitrary configurations and bypass certain protection mechanisms by setting general_log_file to a my.cnf configuration. NOTE: this can be leveraged to execute arbitrary code with root privileges by setting malloc_lib. NOTE: the affected MySQL version information is from Oracle's October 2016 CPU. Oracle has not commented on third-party claims that the issue was silently patched in MySQL 5.5.52, 5.6.33, and 5.7.15.
Paquetes afectados y versiones corregidas
| Fuente | Paquete | Corregido en |
|---|---|---|
| alpine 3.2 | mariadb | 5.5.51-r0 |
| alpine 3.3 | mariadb | 10.1.17-r0 |
| amazon linux 1 | mysql-config, mysql51, mysql51-bench y 28 más | 5.5.52-1.13.amzn1 y 2 más |
| debian 7 | mysql-5.5 | 5.5.52-0+deb7u1 |
| debian 8 | mariadb-10.0, mysql-5.5 | 10.0.27-0+deb8u1 y 1 más |
| Oracle Linux 6 | mysql, mysql-bench, mysql-devel y 5 más | 5.1.73-8.0.1.el6_8 |
| Oracle Linux 7 | mariadb, mariadb-bench, mariadb-devel y 5 más | 1:5.5.52-1.el7 |
| ubuntu 12.04 | mysql-5.5 | 5.5.52-0ubuntu0.12.04.1 |
| ubuntu 14.04 | mariadb-5.5, mysql-5.5, mysql-5.6 | 5.5.52-1ubuntu0.14.04.1 y 2 más |
| ubuntu 14.04-ESM | mysql-5.5 | 5.5.52-0ubuntu0.14.04.1 |
| ubuntu 16.04 | mariadb-10.0, mysql-5.7, percona-xtradb-cluster-5.6 | 10.0.27-0ubuntu0.16.04.1 y 2 más |
| ubuntu 16.04-ESM | mariadb-10.0, mysql-5.7, percona-xtradb-cluster-5.6 | 10.0.27-0ubuntu0.16.04.1 y 2 más |
Mostrar las 72 entradas de 19 fuentes
| Fuente | Paquete | Corregido en |
|---|---|---|
| alpine 3.2 | mariadb | 5.5.51-r0 |
| alpine 3.3 | mariadb | 10.1.17-r0 |
| amazon linux 1 | mysql-config | 5.5.52-1.13.amzn1 |
| amazon linux 1 | mysql51 | 5.1.73-8.72.amzn1 |
| amazon linux 1 | mysql51-bench | 5.1.73-8.72.amzn1 |
| amazon linux 1 | mysql51-common | 5.1.73-8.72.amzn1 |
| amazon linux 1 | mysql51-debuginfo | 5.1.73-8.72.amzn1 |
| amazon linux 1 | mysql51-devel | 5.1.73-8.72.amzn1 |
| amazon linux 1 | mysql51-embedded | 5.1.73-8.72.amzn1 |
| amazon linux 1 | mysql51-embedded-devel | 5.1.73-8.72.amzn1 |
| amazon linux 1 | mysql51-libs | 5.1.73-8.72.amzn1 |
| amazon linux 1 | mysql51-server | 5.1.73-8.72.amzn1 |
| amazon linux 1 | mysql51-test | 5.1.73-8.72.amzn1 |
| amazon linux 1 | mysql55 | 5.5.52-1.13.amzn1 |
| amazon linux 1 | mysql55-bench | 5.5.52-1.13.amzn1 |
| amazon linux 1 | mysql55-debuginfo | 5.5.52-1.13.amzn1 |
| amazon linux 1 | mysql55-devel | 5.5.52-1.13.amzn1 |
| amazon linux 1 | mysql55-embedded | 5.5.52-1.13.amzn1 |
| amazon linux 1 | mysql55-embedded-devel | 5.5.52-1.13.amzn1 |
| amazon linux 1 | mysql55-libs | 5.5.52-1.13.amzn1 |
| amazon linux 1 | mysql55-server | 5.5.52-1.13.amzn1 |
| amazon linux 1 | mysql55-test | 5.5.52-1.13.amzn1 |
| amazon linux 1 | mysql56 | 5.6.33-1.21.amzn1 |
| amazon linux 1 | mysql56-bench | 5.6.33-1.21.amzn1 |
| amazon linux 1 | mysql56-common | 5.6.33-1.21.amzn1 |
| amazon linux 1 | mysql56-debuginfo | 5.6.33-1.21.amzn1 |
| amazon linux 1 | mysql56-devel | 5.6.33-1.21.amzn1 |
| amazon linux 1 | mysql56-embedded | 5.6.33-1.21.amzn1 |
| amazon linux 1 | mysql56-embedded-devel | 5.6.33-1.21.amzn1 |
| amazon linux 1 | mysql56-errmsg | 5.6.33-1.21.amzn1 |
| amazon linux 1 | mysql56-libs | 5.6.33-1.21.amzn1 |
| amazon linux 1 | mysql56-server | 5.6.33-1.21.amzn1 |
| amazon linux 1 | mysql56-test | 5.6.33-1.21.amzn1 |
| debian 7 | mysql-5.5 | 5.5.52-0+deb7u1 |
| debian 8 | mariadb-10.0 | 10.0.27-0+deb8u1 |
| debian 8 | mysql-5.5 | 5.5.52-0+deb8u1 |
| Oracle Linux 6 | mysql | 5.1.73-8.0.1.el6_8 |
| Oracle Linux 6 | mysql-bench | 5.1.73-8.0.1.el6_8 |
| Oracle Linux 6 | mysql-devel | 5.1.73-8.0.1.el6_8 |
| Oracle Linux 6 | mysql-embedded | 5.1.73-8.0.1.el6_8 |
| Oracle Linux 6 | mysql-embedded-devel | 5.1.73-8.0.1.el6_8 |
| Oracle Linux 6 | mysql-libs | 5.1.73-8.0.1.el6_8 |
| Oracle Linux 6 | mysql-server | 5.1.73-8.0.1.el6_8 |
| Oracle Linux 6 | mysql-test | 5.1.73-8.0.1.el6_8 |
| Oracle Linux 7 | mariadb | 1:5.5.52-1.el7 |
| Oracle Linux 7 | mariadb-bench | 1:5.5.52-1.el7 |
| Oracle Linux 7 | mariadb-devel | 1:5.5.52-1.el7 |
| Oracle Linux 7 | mariadb-embedded | 1:5.5.52-1.el7 |
| Oracle Linux 7 | mariadb-embedded-devel | 1:5.5.52-1.el7 |
| Oracle Linux 7 | mariadb-libs | 1:5.5.52-1.el7 |
| Oracle Linux 7 | mariadb-server | 1:5.5.52-1.el7 |
| Oracle Linux 7 | mariadb-test | 1:5.5.52-1.el7 |
| ubuntu 12.04 | mysql-5.5 | 5.5.52-0ubuntu0.12.04.1 |
| ubuntu 14.04 | mariadb-5.5 | 5.5.52-1ubuntu0.14.04.1 |
| ubuntu 14.04 | mysql-5.5 | 5.5.52-0ubuntu0.14.04.1 |
| ubuntu 14.04 | mysql-5.6 | 5.6.33-0ubuntu0.14.04.1 |
| ubuntu 14.04-ESM | mysql-5.5 | 5.5.52-0ubuntu0.14.04.1 |
| ubuntu 16.04 | mariadb-10.0 | 10.0.27-0ubuntu0.16.04.1 |
| ubuntu 16.04 | mysql-5.7 | 5.7.15-0ubuntu0.16.04.1 |
| ubuntu 16.04 | percona-xtradb-cluster-5.6 | 5.6.34-26.19-0ubuntu0.16.04.1 |
| ubuntu 16.04-ESM | mariadb-10.0 | 10.0.27-0ubuntu0.16.04.1 |
| ubuntu 16.04-ESM | mysql-5.7 | 5.7.15-0ubuntu0.16.04.1 |
| ubuntu 16.04-ESM | percona-xtradb-cluster-5.6 | 5.6.34-26.19-0ubuntu0.16.04.1 |
| ubuntu 16.10 | mariadb-10.0 | 10.0.28-0ubuntu0.16.10.1 |
| ubuntu 16.10 | mysql-5.7 | 5.7.15-0ubuntu2 |
| ubuntu 16.10 | percona-xtradb-cluster-5.6 | 5.6.34-26.19-0ubuntu0.16.10.1 |
| ubuntu 17.04 | mysql-5.7 | 5.7.15-0ubuntu2 |
| ubuntu 17.10 | mysql-5.7 | 5.7.15-0ubuntu2 |
| ubuntu 18.04 | mysql-5.7 | 5.7.15-0ubuntu2 |
| ubuntu 18.04-ESM | mysql-5.7 | 5.7.15-0ubuntu2 |
| ubuntu 18.10 | mysql-5.7 | 5.7.15-0ubuntu2 |
| ubuntu 19.04 | mysql-5.7 | 5.7.15-0ubuntu2 |
Referencias
- http://legalhackers.com/advisories/MySQL-Exploit-Remote-Root-Code-Execution-Privesc-CVE-2016-6662.html
- http://rhn.redhat.com/errata/RHSA-2016-2058.html
- http://rhn.redhat.com/errata/RHSA-2016-2059.html
- http://rhn.redhat.com/errata/RHSA-2016-2060.html
- http://rhn.redhat.com/errata/RHSA-2016-2061.html
- http://rhn.redhat.com/errata/RHSA-2016-2062.html
- http://rhn.redhat.com/errata/RHSA-2016-2077.html
- http://rhn.redhat.com/errata/RHSA-2016-2130.html
Las 34 referencias
- http://rhn.redhat.com/errata/RHSA-2016-2131.html
- http://rhn.redhat.com/errata/RHSA-2016-2595.html
- http://rhn.redhat.com/errata/RHSA-2016-2749.html
- http://rhn.redhat.com/errata/RHSA-2016-2927.html
- http://rhn.redhat.com/errata/RHSA-2016-2928.html
- http://rhn.redhat.com/errata/RHSA-2017-0184.html
- http://seclists.org/fulldisclosure/2016/Sep/23
- http://www.debian.org/security/2016/dsa-3666
- http://www.openwall.com/lists/oss-security/2016/09/12/3
- http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html
- http://www.securityfocus.com/bid/92912
- http://www.securitytracker.com/id/1036769
- https://access.redhat.com/security/cve/CVE-2016-6662
- https://jira.mariadb.org/browse/MDEV-10465
- https://legalhackers.com/advisories/MySQL-Exploit-Remote-Root-Code-Execution-Privesc-CVE-2016-6662.txt
- https://linux.oracle.com/cve/CVE-2016-6662.html
- https://linux.oracle.com/errata/ELSA-2017-0184.html
- https://mariadb.com/kb/en/mariadb/mariadb-10027-release-notes/
- https://mariadb.com/kb/en/mariadb/mariadb-10117-release-notes/
- https://mariadb.com/kb/en/mariadb/mariadb-5551-release-notes/
- https://nvd.nist.gov/vuln/detail/CVE-2016-6662
- https://security.gentoo.org/glsa/201701-01
- https://ubuntu.com/security/notices/USN-3078-1
- https://www.cve.org/CVERecord?id=CVE-2016-6662
- https://www.exploit-db.com/exploits/40360/
- https://www.percona.com/blog/2016/09/12/percona-server-critical-update-cve-2016-6662/