CVE-2016-6662
Fixed in a distro release EPSS 68%
Oracle MySQL through 5.5.52, 5.6.x through 5.6.33, and 5.7.x through 5.7.15; MariaDB before 5.5.51, 10.0.x before 10.0.27, and 10.1.x before 10.1.17; and Percona Server before 5.5.51-38.1, 5.6.x before 5.6.32-78.0, and 5.7.x before 5.7.14-7 allow local users to create arbitrary configurations and bypass certain protection mechanisms by setting general_log_file to a my.cnf configuration. NOTE: this can be leveraged to execute arbitrary code with root privileges by setting malloc_lib. NOTE: the affected MySQL version information is from Oracle's October 2016 CPU. Oracle has not commented on third-party claims that the issue was silently patched in MySQL 5.5.52, 5.6.33, and 5.7.15.
Products: oracle mysql, percona_server, mariadb, debian_linux, redhat openstack, redhat enterprise_linux, redhat enterprise_linux_desktop, redhat enterprise_linux_server, redhat enterprise_linux_server_aus, redhat enterprise_linux_server_eus, redhat enterprise_linux_server_tus, redhat enterprise_linux_workstation
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Alpine 3.2 | mariadb | 5.5.51-r0 |
| Alpine 3.3 | mariadb | 10.1.17-r0 |
| Debian 7 | mysql-5.5 | 5.5.52-0+deb7u1 |
| Debian 8 | mysql-5.5 | 5.5.52-0+deb8u1 |
| Red Hat Enterprise Linux 6 | mysql | 0:5.1.73-8.el6_8 |
| Red Hat Enterprise Linux 6 | mysql-bench | 0:5.1.73-8.el6_8 |
| Red Hat Enterprise Linux 6 | mysql-debuginfo | 0:5.1.73-8.el6_8 |
| Red Hat Enterprise Linux 6 | mysql-devel | 0:5.1.73-8.el6_8 |
| Red Hat Enterprise Linux 6 | mysql-embedded | 0:5.1.73-8.el6_8 |
| Red Hat Enterprise Linux 6 | mysql-embedded-devel | 0:5.1.73-8.el6_8 |
| Red Hat Enterprise Linux 6 | mysql-libs | 0:5.1.73-8.el6_8 |
| Red Hat Enterprise Linux 6 | mysql-server | 0:5.1.73-8.el6_8 |
| Red Hat Enterprise Linux 6 | mysql-test | 0:5.1.73-8.el6_8 |
| Red Hat Enterprise Linux 7 | mariadb | 1:5.5.52-1.el7 |
| Red Hat Enterprise Linux 7 | mariadb-bench | 1:5.5.52-1.el7 |
| Red Hat Enterprise Linux 7 | mariadb-debuginfo | 1:5.5.52-1.el7 |
| Red Hat Enterprise Linux 7 | mariadb-devel | 1:5.5.52-1.el7 |
| Red Hat Enterprise Linux 7 | mariadb-embedded | 1:5.5.52-1.el7 |
| Red Hat Enterprise Linux 7 | mariadb-embedded-devel | 1:5.5.52-1.el7 |
| Red Hat Enterprise Linux 7 | mariadb-libs | 1:5.5.52-1.el7 |
| Red Hat Enterprise Linux 7 | mariadb-server | 1:5.5.52-1.el7 |
| Red Hat Enterprise Linux 7 | mariadb-test | 1:5.5.52-1.el7 |
| Red Hat openstack 5 | mariadb-galera | 1:5.5.42-1.2.el7ost |
| Red Hat openstack 5 | mariadb-galera | 0:5.5.42-1.1.el6ost |
| Red Hat openstack 5 | mariadb-galera-common | 1:5.5.42-1.2.el7ost |
| Red Hat openstack 5 | mariadb-galera-common | 0:5.5.42-1.1.el6ost |
| Red Hat openstack 5 | mariadb-galera-debuginfo | 1:5.5.42-1.2.el7ost |
| Red Hat openstack 5 | mariadb-galera-debuginfo | 0:5.5.42-1.1.el6ost |
| Red Hat openstack 5 | mariadb-galera-server | 1:5.5.42-1.2.el7ost |
| Red Hat openstack 5 | mariadb-galera-server | 0:5.5.42-1.1.el6ost |
| Red Hat openstack 6 | mariadb-galera | 1:5.5.42-1.2.el7ost |
| Red Hat openstack 6 | mariadb-galera-common | 1:5.5.42-1.2.el7ost |
| Red Hat openstack 6 | mariadb-galera-debuginfo | 1:5.5.42-1.2.el7ost |
| Red Hat openstack 6 | mariadb-galera-server | 1:5.5.42-1.2.el7ost |
| Red Hat openstack 7 | mariadb-galera | 1:5.5.42-5.el7ost |
| Red Hat openstack 7 | mariadb-galera-common | 1:5.5.42-5.el7ost |
| Red Hat openstack 7 | mariadb-galera-debuginfo | 1:5.5.42-5.el7ost |
| Red Hat openstack 7 | mariadb-galera-server | 1:5.5.42-5.el7ost |
| Red Hat openstack 8 | mariadb-galera | 1:5.5.42-5.el7ost |
| Red Hat openstack 8 | mariadb-galera-common | 1:5.5.42-5.el7ost |
| Red Hat openstack 8 | mariadb-galera-debuginfo | 1:5.5.42-5.el7ost |
| Red Hat openstack 8 | mariadb-galera-server | 1:5.5.42-5.el7ost |
| Red Hat openstack 9 | mariadb-galera | 1:5.5.42-5.el7ost |
| Red Hat openstack 9 | mariadb-galera-common | 1:5.5.42-5.el7ost |
| Red Hat openstack 9 | mariadb-galera-debuginfo | 1:5.5.42-5.el7ost |
| Red Hat openstack 9 | mariadb-galera-server | 1:5.5.42-5.el7ost |
| Red Hat rhel software collections 2 | mariadb55-mariadb | 0:5.5.53-1.el6 |
| Red Hat rhel software collections 2 | mariadb55-mariadb | 0:5.5.53-1.el7 |
| Red Hat rhel software collections 2 | mariadb55-mariadb-bench | 0:5.5.53-1.el6 |
| Red Hat rhel software collections 2 | mariadb55-mariadb-bench | 0:5.5.53-1.el7 |
| Red Hat rhel software collections 2 | mariadb55-mariadb-debuginfo | 0:5.5.53-1.el6 |
| Red Hat rhel software collections 2 | mariadb55-mariadb-debuginfo | 0:5.5.53-1.el7 |
| Red Hat rhel software collections 2 | mariadb55-mariadb-devel | 0:5.5.53-1.el7 |
| Red Hat rhel software collections 2 | mariadb55-mariadb-devel | 0:5.5.53-1.el6 |
| Red Hat rhel software collections 2 | mariadb55-mariadb-libs | 0:5.5.53-1.el6 |
| Red Hat rhel software collections 2 | mariadb55-mariadb-libs | 0:5.5.53-1.el7 |
| Red Hat rhel software collections 2 | mariadb55-mariadb-server | 0:5.5.53-1.el7 |
| Red Hat rhel software collections 2 | mariadb55-mariadb-server | 0:5.5.53-1.el6 |
| Red Hat rhel software collections 2 | mariadb55-mariadb-test | 0:5.5.53-1.el7 |
| Red Hat rhel software collections 2 | mariadb55-mariadb-test | 0:5.5.53-1.el6 |
| Red Hat rhel software collections 2 | mysql55-mysql | 0:5.5.52-1.el6 |
| Red Hat rhel software collections 2 | mysql55-mysql | 0:5.5.52-1.el7 |
| Red Hat rhel software collections 2 | mysql55-mysql-bench | 0:5.5.52-1.el6 |
| Red Hat rhel software collections 2 | mysql55-mysql-bench | 0:5.5.52-1.el7 |
| Red Hat rhel software collections 2 | mysql55-mysql-debuginfo | 0:5.5.52-1.el6 |
| Red Hat rhel software collections 2 | mysql55-mysql-debuginfo | 0:5.5.52-1.el7 |
| Red Hat rhel software collections 2 | mysql55-mysql-devel | 0:5.5.52-1.el7 |
| Red Hat rhel software collections 2 | mysql55-mysql-devel | 0:5.5.52-1.el6 |
| Red Hat rhel software collections 2 | mysql55-mysql-libs | 0:5.5.52-1.el7 |
| Red Hat rhel software collections 2 | mysql55-mysql-libs | 0:5.5.52-1.el6 |
| Red Hat rhel software collections 2 | mysql55-mysql-server | 0:5.5.52-1.el7 |
| Red Hat rhel software collections 2 | mysql55-mysql-server | 0:5.5.52-1.el6 |
| Red Hat rhel software collections 2 | mysql55-mysql-test | 0:5.5.52-1.el7 |
| Red Hat rhel software collections 2 | mysql55-mysql-test | 0:5.5.52-1.el6 |
| Red Hat rhel software collections 2 | rh-mariadb100-mariadb | 1:10.0.28-5.el6 |
| Red Hat rhel software collections 2 | rh-mariadb100-mariadb | 1:10.0.28-5.el7 |
| Red Hat rhel software collections 2 | rh-mariadb100-mariadb-bench | 1:10.0.28-5.el7 |
| Red Hat rhel software collections 2 | rh-mariadb100-mariadb-bench | 1:10.0.28-5.el6 |
| Red Hat rhel software collections 2 | rh-mariadb100-mariadb-common | 1:10.0.28-5.el7 |
| Red Hat rhel software collections 2 | rh-mariadb100-mariadb-common | 1:10.0.28-5.el6 |
| Red Hat rhel software collections 2 | rh-mariadb100-mariadb-config | 1:10.0.28-5.el7 |
| Red Hat rhel software collections 2 | rh-mariadb100-mariadb-config | 1:10.0.28-5.el6 |
| Red Hat rhel software collections 2 | rh-mariadb100-mariadb-debuginfo | 1:10.0.28-5.el7 |
| Red Hat rhel software collections 2 | rh-mariadb100-mariadb-debuginfo | 1:10.0.28-5.el6 |
| Red Hat rhel software collections 2 | rh-mariadb100-mariadb-devel | 1:10.0.28-5.el7 |
| Red Hat rhel software collections 2 | rh-mariadb100-mariadb-devel | 1:10.0.28-5.el6 |
| Red Hat rhel software collections 2 | rh-mariadb100-mariadb-errmsg | 1:10.0.28-5.el7 |
| Red Hat rhel software collections 2 | rh-mariadb100-mariadb-errmsg | 1:10.0.28-5.el6 |
| Red Hat rhel software collections 2 | rh-mariadb100-mariadb-oqgraph-engine | 1:10.0.28-5.el6 |
| Red Hat rhel software collections 2 | rh-mariadb100-mariadb-oqgraph-engine | 1:10.0.28-5.el7 |
| Red Hat rhel software collections 2 | rh-mariadb100-mariadb-server | 1:10.0.28-5.el6 |
| Red Hat rhel software collections 2 | rh-mariadb100-mariadb-server | 1:10.0.28-5.el7 |
| Red Hat rhel software collections 2 | rh-mariadb100-mariadb-test | 1:10.0.28-5.el7 |
| Red Hat rhel software collections 2 | rh-mariadb100-mariadb-test | 1:10.0.28-5.el6 |
| Red Hat rhel software collections 2 | rh-mariadb101-mariadb | 1:10.1.19-6.el7 |
| Red Hat rhel software collections 2 | rh-mariadb101-mariadb | 1:10.1.19-6.el6 |
| Red Hat rhel software collections 2 | rh-mariadb101-mariadb-bench | 1:10.1.19-6.el7 |
| Red Hat rhel software collections 2 | rh-mariadb101-mariadb-bench | 1:10.1.19-6.el6 |
| Red Hat rhel software collections 2 | rh-mariadb101-mariadb-common | 1:10.1.19-6.el6 |
| Red Hat rhel software collections 2 | rh-mariadb101-mariadb-common | 1:10.1.19-6.el7 |
| Red Hat rhel software collections 2 | rh-mariadb101-mariadb-config | 1:10.1.19-6.el7 |
| Red Hat rhel software collections 2 | rh-mariadb101-mariadb-config | 1:10.1.19-6.el6 |
| Red Hat rhel software collections 2 | rh-mariadb101-mariadb-debuginfo | 1:10.1.19-6.el7 |
| Red Hat rhel software collections 2 | rh-mariadb101-mariadb-debuginfo | 1:10.1.19-6.el6 |
| Red Hat rhel software collections 2 | rh-mariadb101-mariadb-devel | 1:10.1.19-6.el6 |
| Red Hat rhel software collections 2 | rh-mariadb101-mariadb-devel | 1:10.1.19-6.el7 |
| Red Hat rhel software collections 2 | rh-mariadb101-mariadb-errmsg | 1:10.1.19-6.el7 |
| Red Hat rhel software collections 2 | rh-mariadb101-mariadb-errmsg | 1:10.1.19-6.el6 |
| Red Hat rhel software collections 2 | rh-mariadb101-mariadb-oqgraph-engine | 1:10.1.19-6.el7 |
| Red Hat rhel software collections 2 | rh-mariadb101-mariadb-oqgraph-engine | 1:10.1.19-6.el6 |
| Red Hat rhel software collections 2 | rh-mariadb101-mariadb-server | 1:10.1.19-6.el7 |
| Red Hat rhel software collections 2 | rh-mariadb101-mariadb-server | 1:10.1.19-6.el6 |
| Red Hat rhel software collections 2 | rh-mariadb101-mariadb-server-galera | 1:10.1.19-6.el7 |
| Red Hat rhel software collections 2 | rh-mariadb101-mariadb-server-galera | 1:10.1.19-6.el6 |
| Red Hat rhel software collections 2 | rh-mariadb101-mariadb-test | 1:10.1.19-6.el7 |
| Red Hat rhel software collections 2 | rh-mariadb101-mariadb-test | 1:10.1.19-6.el6 |
| Red Hat rhel software collections 2 | rh-mysql56-mysql | 0:5.6.34-2.el7 |
| Red Hat rhel software collections 2 | rh-mysql56-mysql | 0:5.6.34-2.el6 |
| Red Hat rhel software collections 2 | rh-mysql56-mysql-bench | 0:5.6.34-2.el7 |
| Red Hat rhel software collections 2 | rh-mysql56-mysql-bench | 0:5.6.34-2.el6 |
| Red Hat rhel software collections 2 | rh-mysql56-mysql-common | 0:5.6.34-2.el7 |
| Red Hat rhel software collections 2 | rh-mysql56-mysql-common | 0:5.6.34-2.el6 |
| Red Hat rhel software collections 2 | rh-mysql56-mysql-config | 0:5.6.34-2.el7 |
| Red Hat rhel software collections 2 | rh-mysql56-mysql-config | 0:5.6.34-2.el6 |
| Red Hat rhel software collections 2 | rh-mysql56-mysql-debuginfo | 0:5.6.34-2.el6 |
| Red Hat rhel software collections 2 | rh-mysql56-mysql-debuginfo | 0:5.6.34-2.el7 |
| Red Hat rhel software collections 2 | rh-mysql56-mysql-devel | 0:5.6.34-2.el7 |
| Red Hat rhel software collections 2 | rh-mysql56-mysql-devel | 0:5.6.34-2.el6 |
| Red Hat rhel software collections 2 | rh-mysql56-mysql-errmsg | 0:5.6.34-2.el7 |
| Red Hat rhel software collections 2 | rh-mysql56-mysql-errmsg | 0:5.6.34-2.el6 |
| Red Hat rhel software collections 2 | rh-mysql56-mysql-server | 0:5.6.34-2.el7 |
| Red Hat rhel software collections 2 | rh-mysql56-mysql-server | 0:5.6.34-2.el6 |
| Red Hat rhel software collections 2 | rh-mysql56-mysql-test | 0:5.6.34-2.el6 |
| Red Hat rhel software collections 2 | rh-mysql56-mysql-test | 0:5.6.34-2.el7 |
| SUSE Linux Enterprise Desktop 12 SP1 | mariadb | 10.0.27-12.1 |
| SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS | mariadb104 | 10.4.30-150100.3.5.10 |
| SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS | python-mysqlclient | 1.4.6-150100.3.3.7 |
| SUSE Linux Enterprise Point of Sale 11 SP3 | mysql | 5.5.52-0.27.1 |
| SUSE Linux Enterprise Server 11 SP3-LTSS | mysql | 5.5.52-0.27.1 |
| SUSE Linux Enterprise Server 11 SP3-TERADATA | mysql | 5.5.52-0.27.1 |
| SUSE Linux Enterprise Server 11 SP4 | mysql | 5.5.53-0.30.1 |
| SUSE Linux Enterprise Server 11 SP4 | mysql | 5.5.52-0.27.1 |
| SUSE Linux Enterprise Server 12 SP1 | mariadb | 10.0.27-12.1 |
| SUSE Linux Enterprise Server 12 SP5 | lz4 | 1.8.0-3.5.2 |
| SUSE Linux Enterprise Server 12 SP5 | mariadb-connector-c | 3.1.22-2.35.1 |
| SUSE Linux Enterprise Server 12 SP5 | mariadb104 | 10.4.30-8.5.46 |
| SUSE Linux Enterprise Server 12 SP5 | python-mysqlclient | 1.3.14-8.9.2 |
| SUSE Linux Enterprise Server 12-LTSS | mariadb | 10.0.27-20.13.1 |
| SUSE Linux Enterprise Server 15 SP1-LTSS | mariadb104 | 10.4.30-150100.3.5.10 |
| SUSE Linux Enterprise Server 15 SP1-LTSS | python-mysqlclient | 1.4.6-150100.3.3.7 |
| SUSE Linux Enterprise Server for SAP Applications 11 SP4 | mysql | 5.5.53-0.30.1 |
| SUSE Linux Enterprise Server for SAP Applications 11 SP4 | mysql | 5.5.52-0.27.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 | mariadb | 10.0.27-20.13.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP1 | mariadb | 10.0.27-12.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP5 | lz4 | 1.8.0-3.5.2 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP5 | mariadb-connector-c | 3.1.22-2.35.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP5 | mariadb104 | 10.4.30-8.5.46 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP5 | python-mysqlclient | 1.3.14-8.9.2 |
| SUSE Linux Enterprise Server for SAP Applications 15 SP1 | mariadb104 | 10.4.30-150100.3.5.10 |
| SUSE Linux Enterprise Server for SAP Applications 15 SP1 | python-mysqlclient | 1.4.6-150100.3.3.7 |
| SUSE Linux Enterprise Software Development Kit 11 SP4 | mysql | 5.5.53-0.30.1 |
| SUSE Linux Enterprise Software Development Kit 11 SP4 | mysql | 5.5.52-0.27.1 |
| SUSE Linux Enterprise Software Development Kit 12 SP1 | mariadb | 10.0.27-12.1 |
| SUSE Linux Enterprise Software Development Kit 12 SP5 | lz4 | 1.8.0-3.5.2 |
| SUSE Linux Enterprise Software Development Kit 12 SP5 | mariadb-connector-c | 3.1.22-2.35.1 |
| SUSE Linux Enterprise Software Development Kit 12 SP5 | mariadb104 | 10.4.30-8.5.46 |
| SUSE Linux Enterprise Software Development Kit 12 SP5 | python-mysqlclient | 1.3.14-8.9.2 |
| SUSE Linux Enterprise Workstation Extension 12 SP1 | mariadb | 10.0.27-12.1 |
| SUSE Manager 2.1 | mysql | 5.5.52-0.27.1 |
| SUSE Manager Proxy 2.1 | mysql | 5.5.52-0.27.1 |
| SUSE OpenStack Cloud 5 | mysql | 5.5.52-0.27.1 |
| Ubuntu 14.04 LTS | mariadb-5.5 | 5.5.52-1ubuntu0.14.04.1 |
| Ubuntu 14.04 LTS | mysql-5.5 | 5.5.52-0ubuntu0.14.04.1 |
| Ubuntu 14.04 LTS | mysql-5.6 | 5.6.33-0ubuntu0.14.04.1 |
| Ubuntu 16.04 LTS | mariadb-10.0 | 10.0.27-0ubuntu0.16.04.1 |
| Ubuntu 16.04 LTS | mysql-5.7 | 5.7.15-0ubuntu0.16.04.1 |
| Ubuntu 16.04 LTS | percona-server-5.6 | no fix |
| Ubuntu 16.04 LTS | percona-xtradb-cluster-5.6 | 5.6.34-26.19-0ubuntu0.16.04.1 |