critical
CVE-2016-6662
mysql: general_log can write to configuration files, leading to privilege escalation (CPU Oct 2016)
In the Trivy database since at least 24 Oct 2026, 07:11 UTCWhen it arrived before that build is not recorded.
Severity by source
NVD9.8CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Red Hat9.8CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Trivy's own label is CRITICAL. Rated critical by NVD. Rated lower by Red Hat (high), Amazon (high), Oracle (high), Ubuntu (medium).
Description
Oracle MySQL through 5.5.52, 5.6.x through 5.6.33, and 5.7.x through 5.7.15; MariaDB before 5.5.51, 10.0.x before 10.0.27, and 10.1.x before 10.1.17; and Percona Server before 5.5.51-38.1, 5.6.x before 5.6.32-78.0, and 5.7.x before 5.7.14-7 allow local users to create arbitrary configurations and bypass certain protection mechanisms by setting general_log_file to a my.cnf configuration. NOTE: this can be leveraged to execute arbitrary code with root privileges by setting malloc_lib. NOTE: the affected MySQL version information is from Oracle's October 2016 CPU. Oracle has not commented on third-party claims that the issue was silently patched in MySQL 5.5.52, 5.6.33, and 5.7.15.
Affected packages and fixed versions
| Source | Package | Fixed in |
|---|---|---|
| alpine 3.2 | mariadb | 5.5.51-r0 |
| alpine 3.3 | mariadb | 10.1.17-r0 |
| amazon linux 1 | mysql-config, mysql51, mysql51-bench and 28 more | 5.5.52-1.13.amzn1 and 2 more |
| debian 7 | mysql-5.5 | 5.5.52-0+deb7u1 |
| debian 8 | mariadb-10.0, mysql-5.5 | 10.0.27-0+deb8u1 and 1 more |
| Oracle Linux 6 | mysql, mysql-bench, mysql-devel and 5 more | 5.1.73-8.0.1.el6_8 |
| Oracle Linux 7 | mariadb, mariadb-bench, mariadb-devel and 5 more | 1:5.5.52-1.el7 |
| ubuntu 12.04 | mysql-5.5 | 5.5.52-0ubuntu0.12.04.1 |
| ubuntu 14.04 | mariadb-5.5, mysql-5.5, mysql-5.6 | 5.5.52-1ubuntu0.14.04.1 and 2 more |
| ubuntu 14.04-ESM | mysql-5.5 | 5.5.52-0ubuntu0.14.04.1 |
| ubuntu 16.04 | mariadb-10.0, mysql-5.7, percona-xtradb-cluster-5.6 | 10.0.27-0ubuntu0.16.04.1 and 2 more |
| ubuntu 16.04-ESM | mariadb-10.0, mysql-5.7, percona-xtradb-cluster-5.6 | 10.0.27-0ubuntu0.16.04.1 and 2 more |
Show all 72 entries from 19 sources
| Source | Package | Fixed in |
|---|---|---|
| alpine 3.2 | mariadb | 5.5.51-r0 |
| alpine 3.3 | mariadb | 10.1.17-r0 |
| amazon linux 1 | mysql-config | 5.5.52-1.13.amzn1 |
| amazon linux 1 | mysql51 | 5.1.73-8.72.amzn1 |
| amazon linux 1 | mysql51-bench | 5.1.73-8.72.amzn1 |
| amazon linux 1 | mysql51-common | 5.1.73-8.72.amzn1 |
| amazon linux 1 | mysql51-debuginfo | 5.1.73-8.72.amzn1 |
| amazon linux 1 | mysql51-devel | 5.1.73-8.72.amzn1 |
| amazon linux 1 | mysql51-embedded | 5.1.73-8.72.amzn1 |
| amazon linux 1 | mysql51-embedded-devel | 5.1.73-8.72.amzn1 |
| amazon linux 1 | mysql51-libs | 5.1.73-8.72.amzn1 |
| amazon linux 1 | mysql51-server | 5.1.73-8.72.amzn1 |
| amazon linux 1 | mysql51-test | 5.1.73-8.72.amzn1 |
| amazon linux 1 | mysql55 | 5.5.52-1.13.amzn1 |
| amazon linux 1 | mysql55-bench | 5.5.52-1.13.amzn1 |
| amazon linux 1 | mysql55-debuginfo | 5.5.52-1.13.amzn1 |
| amazon linux 1 | mysql55-devel | 5.5.52-1.13.amzn1 |
| amazon linux 1 | mysql55-embedded | 5.5.52-1.13.amzn1 |
| amazon linux 1 | mysql55-embedded-devel | 5.5.52-1.13.amzn1 |
| amazon linux 1 | mysql55-libs | 5.5.52-1.13.amzn1 |
| amazon linux 1 | mysql55-server | 5.5.52-1.13.amzn1 |
| amazon linux 1 | mysql55-test | 5.5.52-1.13.amzn1 |
| amazon linux 1 | mysql56 | 5.6.33-1.21.amzn1 |
| amazon linux 1 | mysql56-bench | 5.6.33-1.21.amzn1 |
| amazon linux 1 | mysql56-common | 5.6.33-1.21.amzn1 |
| amazon linux 1 | mysql56-debuginfo | 5.6.33-1.21.amzn1 |
| amazon linux 1 | mysql56-devel | 5.6.33-1.21.amzn1 |
| amazon linux 1 | mysql56-embedded | 5.6.33-1.21.amzn1 |
| amazon linux 1 | mysql56-embedded-devel | 5.6.33-1.21.amzn1 |
| amazon linux 1 | mysql56-errmsg | 5.6.33-1.21.amzn1 |
| amazon linux 1 | mysql56-libs | 5.6.33-1.21.amzn1 |
| amazon linux 1 | mysql56-server | 5.6.33-1.21.amzn1 |
| amazon linux 1 | mysql56-test | 5.6.33-1.21.amzn1 |
| debian 7 | mysql-5.5 | 5.5.52-0+deb7u1 |
| debian 8 | mariadb-10.0 | 10.0.27-0+deb8u1 |
| debian 8 | mysql-5.5 | 5.5.52-0+deb8u1 |
| Oracle Linux 6 | mysql | 5.1.73-8.0.1.el6_8 |
| Oracle Linux 6 | mysql-bench | 5.1.73-8.0.1.el6_8 |
| Oracle Linux 6 | mysql-devel | 5.1.73-8.0.1.el6_8 |
| Oracle Linux 6 | mysql-embedded | 5.1.73-8.0.1.el6_8 |
| Oracle Linux 6 | mysql-embedded-devel | 5.1.73-8.0.1.el6_8 |
| Oracle Linux 6 | mysql-libs | 5.1.73-8.0.1.el6_8 |
| Oracle Linux 6 | mysql-server | 5.1.73-8.0.1.el6_8 |
| Oracle Linux 6 | mysql-test | 5.1.73-8.0.1.el6_8 |
| Oracle Linux 7 | mariadb | 1:5.5.52-1.el7 |
| Oracle Linux 7 | mariadb-bench | 1:5.5.52-1.el7 |
| Oracle Linux 7 | mariadb-devel | 1:5.5.52-1.el7 |
| Oracle Linux 7 | mariadb-embedded | 1:5.5.52-1.el7 |
| Oracle Linux 7 | mariadb-embedded-devel | 1:5.5.52-1.el7 |
| Oracle Linux 7 | mariadb-libs | 1:5.5.52-1.el7 |
| Oracle Linux 7 | mariadb-server | 1:5.5.52-1.el7 |
| Oracle Linux 7 | mariadb-test | 1:5.5.52-1.el7 |
| ubuntu 12.04 | mysql-5.5 | 5.5.52-0ubuntu0.12.04.1 |
| ubuntu 14.04 | mariadb-5.5 | 5.5.52-1ubuntu0.14.04.1 |
| ubuntu 14.04 | mysql-5.5 | 5.5.52-0ubuntu0.14.04.1 |
| ubuntu 14.04 | mysql-5.6 | 5.6.33-0ubuntu0.14.04.1 |
| ubuntu 14.04-ESM | mysql-5.5 | 5.5.52-0ubuntu0.14.04.1 |
| ubuntu 16.04 | mariadb-10.0 | 10.0.27-0ubuntu0.16.04.1 |
| ubuntu 16.04 | mysql-5.7 | 5.7.15-0ubuntu0.16.04.1 |
| ubuntu 16.04 | percona-xtradb-cluster-5.6 | 5.6.34-26.19-0ubuntu0.16.04.1 |
| ubuntu 16.04-ESM | mariadb-10.0 | 10.0.27-0ubuntu0.16.04.1 |
| ubuntu 16.04-ESM | mysql-5.7 | 5.7.15-0ubuntu0.16.04.1 |
| ubuntu 16.04-ESM | percona-xtradb-cluster-5.6 | 5.6.34-26.19-0ubuntu0.16.04.1 |
| ubuntu 16.10 | mariadb-10.0 | 10.0.28-0ubuntu0.16.10.1 |
| ubuntu 16.10 | mysql-5.7 | 5.7.15-0ubuntu2 |
| ubuntu 16.10 | percona-xtradb-cluster-5.6 | 5.6.34-26.19-0ubuntu0.16.10.1 |
| ubuntu 17.04 | mysql-5.7 | 5.7.15-0ubuntu2 |
| ubuntu 17.10 | mysql-5.7 | 5.7.15-0ubuntu2 |
| ubuntu 18.04 | mysql-5.7 | 5.7.15-0ubuntu2 |
| ubuntu 18.04-ESM | mysql-5.7 | 5.7.15-0ubuntu2 |
| ubuntu 18.10 | mysql-5.7 | 5.7.15-0ubuntu2 |
| ubuntu 19.04 | mysql-5.7 | 5.7.15-0ubuntu2 |
References
- http://legalhackers.com/advisories/MySQL-Exploit-Remote-Root-Code-Execution-Privesc-CVE-2016-6662.html
- http://rhn.redhat.com/errata/RHSA-2016-2058.html
- http://rhn.redhat.com/errata/RHSA-2016-2059.html
- http://rhn.redhat.com/errata/RHSA-2016-2060.html
- http://rhn.redhat.com/errata/RHSA-2016-2061.html
- http://rhn.redhat.com/errata/RHSA-2016-2062.html
- http://rhn.redhat.com/errata/RHSA-2016-2077.html
- http://rhn.redhat.com/errata/RHSA-2016-2130.html
All 34 references
- http://rhn.redhat.com/errata/RHSA-2016-2131.html
- http://rhn.redhat.com/errata/RHSA-2016-2595.html
- http://rhn.redhat.com/errata/RHSA-2016-2749.html
- http://rhn.redhat.com/errata/RHSA-2016-2927.html
- http://rhn.redhat.com/errata/RHSA-2016-2928.html
- http://rhn.redhat.com/errata/RHSA-2017-0184.html
- http://seclists.org/fulldisclosure/2016/Sep/23
- http://www.debian.org/security/2016/dsa-3666
- http://www.openwall.com/lists/oss-security/2016/09/12/3
- http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html
- http://www.securityfocus.com/bid/92912
- http://www.securitytracker.com/id/1036769
- https://access.redhat.com/security/cve/CVE-2016-6662
- https://jira.mariadb.org/browse/MDEV-10465
- https://legalhackers.com/advisories/MySQL-Exploit-Remote-Root-Code-Execution-Privesc-CVE-2016-6662.txt
- https://linux.oracle.com/cve/CVE-2016-6662.html
- https://linux.oracle.com/errata/ELSA-2017-0184.html
- https://mariadb.com/kb/en/mariadb/mariadb-10027-release-notes/
- https://mariadb.com/kb/en/mariadb/mariadb-10117-release-notes/
- https://mariadb.com/kb/en/mariadb/mariadb-5551-release-notes/
- https://nvd.nist.gov/vuln/detail/CVE-2016-6662
- https://security.gentoo.org/glsa/201701-01
- https://ubuntu.com/security/notices/USN-3078-1
- https://www.cve.org/CVERecord?id=CVE-2016-6662
- https://www.exploit-db.com/exploits/40360/
- https://www.percona.com/blog/2016/09/12/percona-server-critical-update-cve-2016-6662/