CVE-2016-6664
Fixed in a distro release EPSS 3%
mysqld_safe in Oracle MySQL through 5.5.51, 5.6.x through 5.6.32, and 5.7.x through 5.7.14; MariaDB; Percona Server before 5.5.51-38.2, 5.6.x before 5.6.32-78-1, and 5.7.x before 5.7.14-8; and Percona XtraDB Cluster before 5.5.41-37.0, 5.6.x before 5.6.32-25.17, and 5.7.x before 5.7.14-26.17, when using file-based logging, allows local users with access to the mysql account to gain root privileges via a symlink attack on error logs and possibly other files.
Products: oracle mysql, mariadb, percona_server, percona xtradb_cluster
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Alpine 3.10 | mariadb | 10.1.21-r0 |
| Alpine 3.11 | mariadb | 10.1.21-r0 |
| Alpine 3.12 | mariadb | 10.1.21-r0 |
| Alpine 3.13 | mariadb | 10.1.21-r0 |
| Alpine 3.14 | mariadb | 10.1.21-r0 |
| Alpine 3.15 | mariadb | 10.1.21-r0 |
| Alpine 3.16 | mariadb | 10.1.21-r0 |
| Alpine 3.17 | mariadb | 10.1.21-r0 |
| Alpine 3.18 | mariadb | 10.1.21-r0 |
| Alpine 3.19 | mariadb | 10.1.21-r0 |
| Alpine 3.20 | mariadb | 10.1.21-r0 |
| Alpine 3.21 | mariadb | 10.1.21-r0 |
| Alpine 3.22 | mariadb | 10.1.21-r0 |
| Alpine 3.23 | mariadb | 10.1.21-r0 |
| Alpine 3.24 | mariadb | 10.1.21-r0 |
| Alpine 3.3 | mariadb | 10.1.21-r0 |
| Alpine 3.4 | mariadb | 10.1.21-r0 |
| Alpine 3.5 | mariadb | 10.1.21-r0 |
| Alpine 3.6 | mariadb | 10.1.21-r0 |
| Alpine 3.7 | mariadb | 10.1.21-r0 |
| Alpine 3.8 | mariadb | 10.1.21-r0 |
| Alpine 3.9 | mariadb | 10.1.21-r0 |
| Debian 8 | mariadb-10.0 | 10.0.29-0+deb8u1 |
| Red Hat Enterprise Linux 7 | mariadb | 1:5.5.56-2.el7 |
| Red Hat Enterprise Linux 7 | mariadb-bench | 1:5.5.56-2.el7 |
| Red Hat Enterprise Linux 7 | mariadb-debuginfo | 1:5.5.56-2.el7 |
| Red Hat Enterprise Linux 7 | mariadb-devel | 1:5.5.56-2.el7 |
| Red Hat Enterprise Linux 7 | mariadb-embedded | 1:5.5.56-2.el7 |
| Red Hat Enterprise Linux 7 | mariadb-embedded-devel | 1:5.5.56-2.el7 |
| Red Hat Enterprise Linux 7 | mariadb-libs | 1:5.5.56-2.el7 |
| Red Hat Enterprise Linux 7 | mariadb-server | 1:5.5.56-2.el7 |
| Red Hat Enterprise Linux 7 | mariadb-test | 1:5.5.56-2.el7 |
| Red Hat rhel software collections 2 | mysql55-mysql | 0:5.5.52-1.el6 |
| Red Hat rhel software collections 2 | mysql55-mysql | 0:5.5.52-1.el7 |
| Red Hat rhel software collections 2 | mysql55-mysql-bench | 0:5.5.52-1.el6 |
| Red Hat rhel software collections 2 | mysql55-mysql-bench | 0:5.5.52-1.el7 |
| Red Hat rhel software collections 2 | mysql55-mysql-debuginfo | 0:5.5.52-1.el6 |
| Red Hat rhel software collections 2 | mysql55-mysql-debuginfo | 0:5.5.52-1.el7 |
| Red Hat rhel software collections 2 | mysql55-mysql-devel | 0:5.5.52-1.el6 |
| Red Hat rhel software collections 2 | mysql55-mysql-devel | 0:5.5.52-1.el7 |
| Red Hat rhel software collections 2 | mysql55-mysql-libs | 0:5.5.52-1.el7 |
| Red Hat rhel software collections 2 | mysql55-mysql-libs | 0:5.5.52-1.el6 |
| Red Hat rhel software collections 2 | mysql55-mysql-server | 0:5.5.52-1.el7 |
| Red Hat rhel software collections 2 | mysql55-mysql-server | 0:5.5.52-1.el6 |
| Red Hat rhel software collections 2 | mysql55-mysql-test | 0:5.5.52-1.el6 |
| Red Hat rhel software collections 2 | mysql55-mysql-test | 0:5.5.52-1.el7 |
| Red Hat rhel software collections 2 | rh-mysql56-mysql | 0:5.6.34-2.el6 |
| Red Hat rhel software collections 2 | rh-mysql56-mysql | 0:5.6.34-2.el7 |
| Red Hat rhel software collections 2 | rh-mysql56-mysql-bench | 0:5.6.34-2.el6 |
| Red Hat rhel software collections 2 | rh-mysql56-mysql-bench | 0:5.6.34-2.el7 |
| Red Hat rhel software collections 2 | rh-mysql56-mysql-common | 0:5.6.34-2.el7 |
| Red Hat rhel software collections 2 | rh-mysql56-mysql-common | 0:5.6.34-2.el6 |
| Red Hat rhel software collections 2 | rh-mysql56-mysql-config | 0:5.6.34-2.el7 |
| Red Hat rhel software collections 2 | rh-mysql56-mysql-config | 0:5.6.34-2.el6 |
| Red Hat rhel software collections 2 | rh-mysql56-mysql-debuginfo | 0:5.6.34-2.el6 |
| Red Hat rhel software collections 2 | rh-mysql56-mysql-debuginfo | 0:5.6.34-2.el7 |
| Red Hat rhel software collections 2 | rh-mysql56-mysql-devel | 0:5.6.34-2.el7 |
| Red Hat rhel software collections 2 | rh-mysql56-mysql-devel | 0:5.6.34-2.el6 |
| Red Hat rhel software collections 2 | rh-mysql56-mysql-errmsg | 0:5.6.34-2.el6 |
| Red Hat rhel software collections 2 | rh-mysql56-mysql-errmsg | 0:5.6.34-2.el7 |
| Red Hat rhel software collections 2 | rh-mysql56-mysql-server | 0:5.6.34-2.el6 |
| Red Hat rhel software collections 2 | rh-mysql56-mysql-server | 0:5.6.34-2.el7 |
| Red Hat rhel software collections 2 | rh-mysql56-mysql-test | 0:5.6.34-2.el6 |
| Red Hat rhel software collections 2 | rh-mysql56-mysql-test | 0:5.6.34-2.el7 |
| Red Hat rhel software collections 3 | rh-mariadb100-mariadb | 1:10.0.33-3.el6 |
| Red Hat rhel software collections 3 | rh-mariadb100-mariadb | 1:10.0.33-3.el7 |
| Red Hat rhel software collections 3 | rh-mariadb100-mariadb-bench | 1:10.0.33-3.el6 |
| Red Hat rhel software collections 3 | rh-mariadb100-mariadb-bench | 1:10.0.33-3.el7 |
| Red Hat rhel software collections 3 | rh-mariadb100-mariadb-common | 1:10.0.33-3.el6 |
| Red Hat rhel software collections 3 | rh-mariadb100-mariadb-common | 1:10.0.33-3.el7 |
| Red Hat rhel software collections 3 | rh-mariadb100-mariadb-config | 1:10.0.33-3.el6 |
| Red Hat rhel software collections 3 | rh-mariadb100-mariadb-config | 1:10.0.33-3.el7 |
| Red Hat rhel software collections 3 | rh-mariadb100-mariadb-debuginfo | 1:10.0.33-3.el6 |
| Red Hat rhel software collections 3 | rh-mariadb100-mariadb-debuginfo | 1:10.0.33-3.el7 |
| Red Hat rhel software collections 3 | rh-mariadb100-mariadb-devel | 1:10.0.33-3.el6 |
| Red Hat rhel software collections 3 | rh-mariadb100-mariadb-devel | 1:10.0.33-3.el7 |
| Red Hat rhel software collections 3 | rh-mariadb100-mariadb-errmsg | 1:10.0.33-3.el6 |
| Red Hat rhel software collections 3 | rh-mariadb100-mariadb-errmsg | 1:10.0.33-3.el7 |
| Red Hat rhel software collections 3 | rh-mariadb100-mariadb-oqgraph-engine | 1:10.0.33-3.el6 |
| Red Hat rhel software collections 3 | rh-mariadb100-mariadb-oqgraph-engine | 1:10.0.33-3.el7 |
| Red Hat rhel software collections 3 | rh-mariadb100-mariadb-server | 1:10.0.33-3.el6 |
| Red Hat rhel software collections 3 | rh-mariadb100-mariadb-server | 1:10.0.33-3.el7 |
| Red Hat rhel software collections 3 | rh-mariadb100-mariadb-test | 1:10.0.33-3.el7 |
| Red Hat rhel software collections 3 | rh-mariadb100-mariadb-test | 1:10.0.33-3.el6 |
| Red Hat rhel software collections 3 | rh-mariadb101-galera | 0:25.3.12-12.el6 |
| Red Hat rhel software collections 3 | rh-mariadb101-galera | 0:25.3.12-12.el7 |
| Red Hat rhel software collections 3 | rh-mariadb101-galera-debuginfo | 0:25.3.12-12.el6 |
| Red Hat rhel software collections 3 | rh-mariadb101-galera-debuginfo | 0:25.3.12-12.el7 |
| Red Hat rhel software collections 3 | rh-mariadb101-mariadb | 1:10.1.29-3.el7 |
| Red Hat rhel software collections 3 | rh-mariadb101-mariadb | 1:10.1.29-3.el6 |
| Red Hat rhel software collections 3 | rh-mariadb101-mariadb-bench | 1:10.1.29-3.el6 |
| Red Hat rhel software collections 3 | rh-mariadb101-mariadb-bench | 1:10.1.29-3.el7 |
| Red Hat rhel software collections 3 | rh-mariadb101-mariadb-common | 1:10.1.29-3.el7 |
| Red Hat rhel software collections 3 | rh-mariadb101-mariadb-common | 1:10.1.29-3.el6 |
| Red Hat rhel software collections 3 | rh-mariadb101-mariadb-config | 1:10.1.29-3.el6 |
| Red Hat rhel software collections 3 | rh-mariadb101-mariadb-config | 1:10.1.29-3.el7 |
| Red Hat rhel software collections 3 | rh-mariadb101-mariadb-debuginfo | 1:10.1.29-3.el7 |
| Red Hat rhel software collections 3 | rh-mariadb101-mariadb-debuginfo | 1:10.1.29-3.el6 |
| Red Hat rhel software collections 3 | rh-mariadb101-mariadb-devel | 1:10.1.29-3.el6 |
| Red Hat rhel software collections 3 | rh-mariadb101-mariadb-devel | 1:10.1.29-3.el7 |
| Red Hat rhel software collections 3 | rh-mariadb101-mariadb-errmsg | 1:10.1.29-3.el6 |
| Red Hat rhel software collections 3 | rh-mariadb101-mariadb-errmsg | 1:10.1.29-3.el7 |
| Red Hat rhel software collections 3 | rh-mariadb101-mariadb-oqgraph-engine | 1:10.1.29-3.el6 |
| Red Hat rhel software collections 3 | rh-mariadb101-mariadb-oqgraph-engine | 1:10.1.29-3.el7 |
| Red Hat rhel software collections 3 | rh-mariadb101-mariadb-server | 1:10.1.29-3.el6 |
| Red Hat rhel software collections 3 | rh-mariadb101-mariadb-server | 1:10.1.29-3.el7 |
| Red Hat rhel software collections 3 | rh-mariadb101-mariadb-server-galera | 1:10.1.29-3.el6 |
| Red Hat rhel software collections 3 | rh-mariadb101-mariadb-server-galera | 1:10.1.29-3.el7 |
| Red Hat rhel software collections 3 | rh-mariadb101-mariadb-test | 1:10.1.29-3.el6 |
| Red Hat rhel software collections 3 | rh-mariadb101-mariadb-test | 1:10.1.29-3.el7 |
| SUSE Linux Enterprise Desktop 12 SP1 | mariadb | 10.0.29-22.1 |
| SUSE Linux Enterprise Desktop 12 SP2 | mariadb | 10.0.29-22.1 |
| SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS | mariadb104 | 10.4.30-150100.3.5.10 |
| SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS | python-mysqlclient | 1.4.6-150100.3.3.7 |
| SUSE Linux Enterprise Server 12 SP1 | mariadb | 10.0.29-22.1 |
| SUSE Linux Enterprise Server 12 SP2 | mariadb | 10.0.29-22.1 |
| SUSE Linux Enterprise Server 12 SP5 | lz4 | 1.8.0-3.5.2 |
| SUSE Linux Enterprise Server 12 SP5 | mariadb-connector-c | 3.1.22-2.35.1 |
| SUSE Linux Enterprise Server 12 SP5 | mariadb104 | 10.4.30-8.5.46 |
| SUSE Linux Enterprise Server 12 SP5 | python-mysqlclient | 1.3.14-8.9.2 |
| SUSE Linux Enterprise Server 12-LTSS | mariadb | 10.0.29-20.23.1 |
| SUSE Linux Enterprise Server 15 SP1-LTSS | mariadb104 | 10.4.30-150100.3.5.10 |
| SUSE Linux Enterprise Server 15 SP1-LTSS | python-mysqlclient | 1.4.6-150100.3.3.7 |
| SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 | mariadb | 10.0.29-22.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 | mariadb | 10.0.29-20.23.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP1 | mariadb | 10.0.29-22.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP2 | mariadb | 10.0.29-22.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP5 | lz4 | 1.8.0-3.5.2 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP5 | mariadb-connector-c | 3.1.22-2.35.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP5 | mariadb104 | 10.4.30-8.5.46 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP5 | python-mysqlclient | 1.3.14-8.9.2 |
| SUSE Linux Enterprise Server for SAP Applications 15 SP1 | mariadb104 | 10.4.30-150100.3.5.10 |
| SUSE Linux Enterprise Server for SAP Applications 15 SP1 | python-mysqlclient | 1.4.6-150100.3.3.7 |
| SUSE Linux Enterprise Software Development Kit 12 SP1 | mariadb | 10.0.29-22.1 |
| SUSE Linux Enterprise Software Development Kit 12 SP2 | mariadb | 10.0.29-22.1 |
| SUSE Linux Enterprise Software Development Kit 12 SP5 | lz4 | 1.8.0-3.5.2 |
| SUSE Linux Enterprise Software Development Kit 12 SP5 | mariadb-connector-c | 3.1.22-2.35.1 |
| SUSE Linux Enterprise Software Development Kit 12 SP5 | mariadb104 | 10.4.30-8.5.46 |
| SUSE Linux Enterprise Software Development Kit 12 SP5 | python-mysqlclient | 1.3.14-8.9.2 |
| SUSE Linux Enterprise Workstation Extension 12 SP1 | mariadb | 10.0.29-22.1 |
| SUSE Linux Enterprise Workstation Extension 12 SP2 | mariadb | 10.0.29-22.1 |
| Ubuntu 14.04 LTS | mysql-5.5 | 5.5.52-0ubuntu0.14.04.1 |
| Ubuntu 16.04 LTS | mariadb-10.0 | 10.0.29-0ubuntu0.16.04.1 |
| openSUSE Tumbleweed | mariadb | 10.6.4-2.1 |