Race condition in Oracle MySQL before 5.5.52, 5.6.x before 5.6.33, 5.7.x before 5.7.15, and 8.x before 8.0.1; MariaDB before 5.5.52, 10.0.x before 10.0.28, and 10.1.x before 10.1.18; Percona Server before 5.5.51-38.2, 5.6.x before 5.6.32-78-1, and 5.7.x before 5.7.14-8; and Percona XtraDB Cluster before 5.5.41-37.0, 5.6.x before 5.6.32-25.17, and 5.7.x before 5.7.14-26.17 allows local users with certain permissions to gain privileges by leveraging use of my_copystat by REPAIR TABLE to repair a MyISAM table.
CVSS Details
- CVSS 3.1 Base Score: 7
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade mariadb | Sep 20, 2017 | Dec 13, 2016 |
| Amazon_linux | — | Upgrade mysql51 | Feb 23, 2017 | Dec 13, 2016 |
| Centos_linux | — | Upgrade mysqlUpgrade mysql-debuginfoUpgrade mysql-serverUpgrade mysql-embedded-develUpgrade mysql-benchUpgrade mysql-embeddedUpgrade mysql-libsUpgrade mysql-testUpgrade mysql-devel | Jul 1, 2017 | Dec 13, 2016 |
| Debian | — | Upgrade mariadb-10.0Upgrade mysql-5.5 | Nov 12, 2016 | Nov 11, 2016 |
| F5 Big Ip | — | Update F5 BIG-IP to the latest version | Jun 17, 2026 | Feb 3, 2017 |
| Freebsd | — | Upgrade percona55-clientUpgrade percona56-clientUpgrade mysql57-clientUpgrade mysql56-clientUpgrade mariadb101-serverUpgrade mysql55-clientUpgrade mariadb100-serverUpgrade mysql56-serverUpgrade mariadb101-clientUpgrade percona56-serverUpgrade mysql55-serverUpgrade mysql57-serverUpgrade mariadb55-clientUpgrade mariadb100-clientUpgrade percona55-serverUpgrade mariadb55-server | Jan 15, 2017 | Jan 14, 2017 |
| Huawei Euleros 2_0_sp1 | — | Upgrade mariadb-serverUpgrade mariadb-libsUpgrade mariadbUpgrade mariadb-embeddedUpgrade mariadb-benchUpgrade mariadb-develUpgrade mariadb-test | Nov 30, 2017 | Dec 13, 2016 |
| Mariadb Mariadb | — | Upgrade MariaDB to the latest version | Mar 4, 2025 | Dec 13, 2016 |
| Oracle Mysql | — | Upgrade to Oracle MySQL version 5.7.15Upgrade to Oracle MySQL version 5.5.52Upgrade to Oracle MySQL version 5.6.32Upgrade to Oracle MySQL version 5.5.51Upgrade to Oracle MySQL version 5.5.41Upgrade to Oracle MySQL version 8.0.1Upgrade to Oracle MySQL version 5.7.14Upgrade to Oracle MySQL version 5.6.33 | Jan 23, 2017 | Dec 13, 2016 |
| Oracle_linux | — | Upgrade mysql-develUpgrade mysql-testUpgrade mariadb-serverUpgrade mysql-embeddedUpgrade mariadb-embeddedUpgrade mysql-serverUpgrade mysql-benchUpgrade mariadb-testUpgrade mariadbUpgrade mariadb-benchUpgrade mariadb-embedded-develUpgrade mysqlUpgrade mysql-libsUpgrade mysql-embedded-develUpgrade mariadb-develUpgrade mariadb-libs | Dec 13, 2016 | Sep 12, 2016 |
| Redhat_linux | — | No solution existsUpgrade mysql-embeddedUpgrade mysql-libsUpgrade mysql-embedded-develUpgrade mysql-debuginfoUpgrade mysql-develUpgrade mysql-benchUpgrade mysql-testUpgrade mysqlUpgrade mysql-server | Dec 13, 2016 | Dec 13, 2016 |
| Suse | — | Upgrade mariadb-toolsUpgrade mariadb-errormessagesUpgrade mariadbUpgrade libmysqlclient18-32bitUpgrade mariadb-clientUpgrade libmysqlclient_r18-32bitUpgrade libmysqlclient-develUpgrade libmariadbd19Upgrade libmysqld-develUpgrade libmysqld19Upgrade libmysqlclient_r18Upgrade libmysqld18Upgrade mariadb-100-errormessagesUpgrade libmariadbd-develUpgrade libmysqlclient18 | Dec 13, 2016 | Dec 13, 2016 |
| Ubuntu | — | Upgrade mariadb-10.0Upgrade mysql-5.5Upgrade mariadb-5.5Upgrade percona-xtradb-cluster-5.6 | Nov 19, 2024 | Dec 13, 2016 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub