The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
mysqld_safe in Oracle MySQL through 5.5.51, 5.6.x through 5.6.32, and 5.7.x through 5.7.14; MariaDB; Percona Server before 5.5.51-38.2, 5.6.x before 5.6.32-78-1, and 5.7.x before 5.7.14-8; and Percona XtraDB Cluster before 5.5.41-37.0, 5.6.x before 5.6.32-25.17, and 5.7.x before 5.7.14-26.17, when using file-based logging, allows local users with access to the mysql account to gain root privileges via a symlink attack on error logs and possibly other files.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade mariadb | Aug 30, 2017 | Dec 13, 2016 |
| Centos_linux | — | Upgrade mariadbUpgrade mariadb-embedded-develUpgrade mariadb-develUpgrade mariadb-embeddedUpgrade mariadb-benchUpgrade mariadb-serverUpgrade mariadb-testUpgrade mariadb-libsUpgrade mariadb-debuginfo | Aug 28, 2019 | Dec 13, 2016 |
| Debian | — | Upgrade mariadb-10.1Upgrade mysql-5.5 | Jan 24, 2017 | Dec 13, 2016 |
| Freebsd | — | Upgrade mysql56-clientUpgrade mysql57-clientUpgrade mariadb101-serverUpgrade mysql55-clientUpgrade percona55-serverUpgrade mysql57-serverUpgrade mariadb101-clientUpgrade percona55-clientUpgrade mariadb100-serverUpgrade percona56-clientUpgrade mariadb55-clientUpgrade mariadb55-serverUpgrade mariadb100-clientUpgrade percona56-serverUpgrade mysql55-serverUpgrade mysql56-server | Jan 15, 2017 | Jan 14, 2017 |
| Gentoo Linux | — | Upgrade dev-db/mariadb. | Oct 30, 2017 | Dec 13, 2016 |
| Huawei Euleros 2_0_sp1 | — | Upgrade mariadb-embeddedUpgrade mariadb-benchUpgrade mariadb-develUpgrade mariadb-serverUpgrade mariadb-testUpgrade mariadb-libsUpgrade mariadb | Nov 30, 2017 | Dec 13, 2016 |
| Huawei Euleros 2_0_sp2 | — | Upgrade mariadb-benchUpgrade mariadb-serverUpgrade mariadbUpgrade mariadb-develUpgrade mariadb-libsUpgrade mariadb-test | Nov 30, 2017 | Dec 13, 2016 |
| Mariadb Mariadb | — | Upgrade MariaDB to the latest version | Mar 4, 2025 | Dec 13, 2016 |
| Oracle Mysql | — | Upgrade to Oracle MySQL version 5.7.14Upgrade to Oracle MySQL version 5.5.51Upgrade to Oracle MySQL version 5.5.41Upgrade to Oracle MySQL version 5.6.32 | Dec 21, 2016 | Dec 13, 2016 |
| Oracle_linux | — | Upgrade mariadbUpgrade mariadb-embeddedUpgrade mariadb-embedded-develUpgrade mariadb-testUpgrade mariadb-benchUpgrade mariadb-serverUpgrade mariadb-libsUpgrade mariadb-devel | Aug 8, 2017 | Oct 19, 2016 |
| Redhat_linux | — | Upgrade mariadb-embeddedUpgrade mariadbUpgrade mariadb-debuginfoUpgrade mariadb-testUpgrade mariadb-serverUpgrade mariadb-benchUpgrade mariadb-develNo solution existsUpgrade mariadb-embedded-develUpgrade mariadb-libs | Aug 4, 2017 | Dec 13, 2016 |
| Suse | — | Upgrade mariadb-errormessagesUpgrade libmysqld-develUpgrade libmysqld19Upgrade mariadb-100-errormessagesUpgrade libmysqlclient18-32bitUpgrade libmysqlclient_r18-32bitUpgrade libmysqlclient_r18Upgrade mariadb-toolsUpgrade libmariadbd-develUpgrade libmysqld18Upgrade libmariadbd19Upgrade libmysqlclient18Upgrade libmysqlclient-develUpgrade mariadb-clientUpgrade mariadb | Feb 8, 2017 | Dec 13, 2016 |
| Ubuntu | — | Upgrade mysql-5.5Upgrade mariadb-10.0 | Nov 19, 2024 | Dec 13, 2016 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub