mysqld_safe in Oracle MySQL through 5.5.51, 5.6.x through 5.6.32, and 5.7.x through 5.7.14; MariaDB; Percona Server before 5.5.51-38.2, 5.6.x before 5.6.32-78-1, and 5.7.x before 5.7.14-8; and Percona XtraDB Cluster before 5.5.41-37.0, 5.6.x before 5.6.32-25.17, and 5.7.x before 5.7.14-26.17, when using file-based logging, allows local users with access to the mysql account to gain root privileges via a symlink attack on error logs and possibly other files.
CVSS Details
- CVSS 3.1 Base Score: 7
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade mariadb | Aug 30, 2017 | Dec 13, 2016 |
| Centos_linux | — | Upgrade mariadb-libsUpgrade mariadb-testUpgrade mariadb-debuginfoUpgrade mariadb-embeddedUpgrade mariadb-serverUpgrade mariadb-benchUpgrade mariadb-embedded-develUpgrade mariadb-develUpgrade mariadb | Aug 28, 2019 | Dec 13, 2016 |
| Debian | — | Upgrade mysql-5.5Upgrade mariadb-10.1 | Jan 24, 2017 | Dec 13, 2016 |
| Freebsd | — | Upgrade mysql56-serverUpgrade mysql55-serverUpgrade percona56-serverUpgrade mariadb100-serverUpgrade percona56-clientUpgrade mariadb100-clientUpgrade percona55-clientUpgrade mariadb55-serverUpgrade mariadb55-clientUpgrade mysql55-clientUpgrade mariadb101-serverUpgrade mysql57-serverUpgrade percona55-serverUpgrade mysql57-clientUpgrade mariadb101-clientUpgrade mysql56-client | Jan 15, 2017 | Jan 14, 2017 |
| Gentoo Linux | — | Upgrade dev-db/mariadb. | Oct 30, 2017 | Dec 13, 2016 |
| Huawei Euleros 2_0_sp1 | — | Upgrade mariadbUpgrade mariadb-testUpgrade mariadb-libsUpgrade mariadb-serverUpgrade mariadb-embeddedUpgrade mariadb-develUpgrade mariadb-bench | Nov 30, 2017 | Dec 13, 2016 |
| Huawei Euleros 2_0_sp2 | — | Upgrade mariadb-testUpgrade mariadb-benchUpgrade mariadb-libsUpgrade mariadb-develUpgrade mariadbUpgrade mariadb-server | Nov 30, 2017 | Dec 13, 2016 |
| Mariadb Mariadb | — | Upgrade MariaDB to the latest version | Mar 4, 2025 | Dec 13, 2016 |
| Oracle Mysql | — | Upgrade to Oracle MySQL version 5.6.32Upgrade to Oracle MySQL version 5.7.14Upgrade to Oracle MySQL version 5.5.51Upgrade to Oracle MySQL version 5.5.41 | Dec 21, 2016 | Dec 13, 2016 |
| Oracle_linux | — | Upgrade mariadbUpgrade mariadb-embeddedUpgrade mariadb-embedded-develUpgrade mariadb-libsUpgrade mariadb-benchUpgrade mariadb-testUpgrade mariadb-serverUpgrade mariadb-devel | Aug 8, 2017 | Oct 19, 2016 |
| Redhat_linux | — | Upgrade mariadb-develUpgrade mariadb-libsUpgrade mariadb-embedded-develUpgrade mariadb-serverUpgrade mariadb-benchNo solution existsUpgrade mariadb-testUpgrade mariadb-debuginfoUpgrade mariadb-embeddedUpgrade mariadb | Aug 4, 2017 | Dec 13, 2016 |
| Suse | — | Upgrade libmariadbd19Upgrade libmysqld18Upgrade libmysqlclient18Upgrade mariadb-clientUpgrade mariadbUpgrade libmysqlclient-develUpgrade mariadb-toolsUpgrade libmysqld-develUpgrade libmariadbd-develUpgrade libmysqlclient_r18Upgrade mariadb-100-errormessagesUpgrade libmysqld19Upgrade libmysqlclient18-32bitUpgrade libmysqlclient_r18-32bitUpgrade mariadb-errormessages | Feb 8, 2017 | Dec 13, 2016 |
| Ubuntu | — | Upgrade mariadb-10.0Upgrade mysql-5.5 | Nov 19, 2024 | Dec 13, 2016 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub