The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
Oracle MySQL through 5.5.52, 5.6.x through 5.6.33, and 5.7.x through 5.7.15; MariaDB before 5.5.51, 10.0.x before 10.0.27, and 10.1.x before 10.1.17; and Percona Server before 5.5.51-38.1, 5.6.x before 5.6.32-78.0, and 5.7.x before 5.7.14-7 allow local users to create arbitrary configurations and bypass certain protection mechanisms by setting general_log_file to a my.cnf configuration. NOTE: this can be leveraged to execute arbitrary code with root privileges by setting malloc_lib. NOTE: the affected MySQL version information is from Oracle's October 2016 CPU. Oracle has not commented on third-party claims that the issue was silently patched in MySQL 5.5.52, 5.6.33, and 5.7.15.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade mariadb | Aug 30, 2017 | Sep 20, 2016 |
| Amazon_linux | — | Upgrade mysql55Upgrade mysql56Upgrade mysql51 | Oct 13, 2016 | Sep 20, 2016 |
| Centos_linux | — | Upgrade mysql-benchUpgrade mysqlUpgrade mysql-develUpgrade mysql-serverUpgrade mysql-testUpgrade mysql-embeddedUpgrade mysql-debuginfoUpgrade mysql-embedded-develUpgrade mysql-libs | Jul 1, 2017 | Sep 20, 2016 |
| Debian | — | Upgrade mariadb-10.0Upgrade mysql-5.5 | Mar 31, 2017 | Sep 14, 2016 |
| Freebsd | — | Upgrade mysql55-serverUpgrade mysql56-serverUpgrade mariadb55-serverUpgrade mariadb100-serverUpgrade mysql57-serverUpgrade percona57-serverUpgrade percona55-serverUpgrade mariadb101-serverUpgrade percona56-serverUpgrade mysql57-client | Nov 14, 2016 | Sep 14, 2016 |
| Gentoo Linux | — | Upgrade dev-db/mysql.Upgrade dev-db/mariadb. | Oct 30, 2017 | Sep 20, 2016 |
| Huawei Euleros 2_0_sp1 | — | Upgrade mariadb-embeddedUpgrade mariadb-testUpgrade mariadbUpgrade mariadb-benchUpgrade mariadb-libsUpgrade mariadb-develUpgrade mariadb-server | Nov 30, 2017 | Sep 20, 2016 |
| Mariadb Mariadb | — | Upgrade MariaDB to the latest version | Mar 4, 2025 | Sep 20, 2016 |
| Oracle Mysql | — | Upgrade to Oracle MySQL version 5.6.32Upgrade to Oracle MySQL version 5.7.14Upgrade to Oracle MySQL version 5.5.51 | Sep 23, 2016 | Sep 20, 2016 |
| Oracle Solaris | — | Upgrade database/mysql-55/library to version 5.5.57-0.175.3.25.0.1.0 on Solaris 11.3Upgrade database/mysql-57/client to version 5.7.17-0.175.3.19.0.2.0 on Solaris 11.3Upgrade database/mysql-56/tests to version 5.6.37-0.175.3.25.0.1.0 on Solaris 11.3Upgrade database/mysql-57/library to version 5.7.17-0.175.3.19.0.2.0 on Solaris 11.3Upgrade database/mysql-55 to version 5.5.57-0.175.3.25.0.1.0 on Solaris 11.3Upgrade runtime/perl-threaded-512 to version 5.12.5-0.175.3.19.0.2.0 on Solaris 11.3Upgrade database/mysql-57 to version 5.7.17-0.175.3.19.0.2.0 on Solaris 11.3Upgrade runtime/perl-512 to version 5.12.5-0.175.3.19.0.2.0 on Solaris 11.3Upgrade database/mysql-57/tests to version 5.7.17-0.175.3.19.0.2.0 on Solaris 11.3Upgrade database/mysql-56/client to version 5.6.37-0.175.3.25.0.1.0 on Solaris 11.3Upgrade database/mysql-56 to version 5.6.37-0.175.3.25.0.1.0 on Solaris 11.3Upgrade database/mysql-57/embedded to version 5.7.17-0.175.3.19.0.2.0 on Solaris 11.3Upgrade database/mysql-55/tests to version 5.5.57-0.175.3.25.0.1.0 on Solaris 11.3Upgrade database/mysql-56/library to version 5.6.37-0.175.3.25.0.1.0 on Solaris 11.3Upgrade database/mysql-55/client to version 5.5.57-0.175.3.25.0.1.0 on Solaris 11.3 | May 29, 2017 | Sep 20, 2016 |
| Oracle_linux | — | Upgrade mariadb-testUpgrade mariadb-embedded-develUpgrade mariadb-libsUpgrade mysql-libsUpgrade mysqlUpgrade mysql-embedded-develUpgrade mysql-serverUpgrade mariadbUpgrade mariadb-benchUpgrade mariadb-serverUpgrade mysql-embeddedUpgrade mariadb-embeddedUpgrade mysql-develUpgrade mariadb-develUpgrade mysql-testUpgrade mysql-bench | Nov 9, 2016 | Sep 12, 2016 |
| Redhat_linux | — | Upgrade mysql-embedded-develNo solution existsUpgrade mysqlUpgrade mysql-benchUpgrade mysql-testUpgrade mysql-debuginfoUpgrade mysql-embeddedUpgrade mysql-develUpgrade mysql-serverUpgrade mysql-libs | Nov 4, 2016 | Sep 20, 2016 |
| Suse | — | Upgrade libmysql55client_r18Upgrade libmysqlclient_r18Upgrade mysql-clientUpgrade libmysqlclient_r18-32bitUpgrade libmysqld-develUpgrade libmysqlclient18-32bitUpgrade mysql-toolsUpgrade libmysqlclient-develUpgrade mysqlUpgrade mariadb-100-errormessagesUpgrade libmysqld18Upgrade mariadb-toolsUpgrade libmysql55client_r18-32bitUpgrade libmysqlclient18Upgrade mariadbUpgrade libmysql55client18-x86Upgrade libmysql55client18Upgrade mariadb-errormessagesUpgrade libmariadbd-develUpgrade mariadb-clientUpgrade libmariadbd19Upgrade libmysql55client_r18-x86Upgrade libmysqld19Upgrade libmysql55client18-32bit | Sep 21, 2016 | Sep 20, 2016 |
| Ubuntu | — | Upgrade mysql-server-5.7Upgrade mysql-server-5.5 | Jul 1, 2017 | Sep 13, 2016 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub