mysqld_safe in Oracle MySQL through 5.5.51, 5.6.x through 5.6.32, and 5.7.x through 5.7.14; MariaDB; Percona Server before 5.5.51-38.2, 5.6.x before 5.6.32-78-1, and 5.7.x before 5.7.14-8; and Percona XtraDB Cluster before 5.5.41-37.0, 5.6.x before 5.6.32-25.17, and 5.7.x before 5.7.14-26.17, when using file-based logging, allows local users with access to the mysql account to gain root privileges via a symlink attack on error logs and possibly other files.
CVSS Details
- CVSS 3.1 Base Score: 7
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | alpine-linux-upgrade-mariadb | Aug 30, 2017 | Dec 13, 2016 | |
| Centos_linux | — | centos-upgrade-mariadbcentos-upgrade-mariadb-benchcentos-upgrade-mariadb-debuginfocentos-upgrade-mariadb-develcentos-upgrade-mariadb-embeddedcentos-upgrade-mariadb-embedded-develcentos-upgrade-mariadb-libscentos-upgrade-mariadb-servercentos-upgrade-mariadb-test | Aug 28, 2019 | Dec 13, 2016 |
| Debian | debian-upgrade-mariadb-10-1debian-upgrade-mysql-5-5 | Jan 24, 2017 | Dec 13, 2016 | |
| Freebsd | freebsd-upgrade-package-mariadb55-clientfreebsd-upgrade-package-mariadb55-serverfreebsd-upgrade-package-mariadb100-clientfreebsd-upgrade-package-mariadb100-serverfreebsd-upgrade-package-mariadb101-clientfreebsd-upgrade-package-mariadb101-serverfreebsd-upgrade-package-mysql55-clientfreebsd-upgrade-package-mysql55-serverfreebsd-upgrade-package-mysql56-clientfreebsd-upgrade-package-mysql56-serverfreebsd-upgrade-package-mysql57-clientfreebsd-upgrade-package-mysql57-serverfreebsd-upgrade-package-percona55-clientfreebsd-upgrade-package-percona55-serverfreebsd-upgrade-package-percona56-clientfreebsd-upgrade-package-percona56-server | Jan 15, 2017 | Jan 14, 2017 | |
| Gentoo Linux | gentoo-linux-upgrade-dev-db-mariadb | Oct 30, 2017 | Dec 13, 2016 | |
| Huawei Euleros 2_0_sp1 | huawei-euleros-2_0_sp1-upgrade-mariadbhuawei-euleros-2_0_sp1-upgrade-mariadb-benchhuawei-euleros-2_0_sp1-upgrade-mariadb-develhuawei-euleros-2_0_sp1-upgrade-mariadb-embeddedhuawei-euleros-2_0_sp1-upgrade-mariadb-libshuawei-euleros-2_0_sp1-upgrade-mariadb-serverhuawei-euleros-2_0_sp1-upgrade-mariadb-test | Nov 30, 2017 | Dec 13, 2016 | |
| Huawei Euleros 2_0_sp2 | huawei-euleros-2_0_sp2-upgrade-mariadbhuawei-euleros-2_0_sp2-upgrade-mariadb-benchhuawei-euleros-2_0_sp2-upgrade-mariadb-develhuawei-euleros-2_0_sp2-upgrade-mariadb-libshuawei-euleros-2_0_sp2-upgrade-mariadb-serverhuawei-euleros-2_0_sp2-upgrade-mariadb-test | Nov 30, 2017 | Dec 13, 2016 | |
| Mariadb Mariadb | mariadb-mariadb-upgrade-latest | Mar 4, 2025 | Dec 13, 2016 | |
| Oracle Mysql | mysql-upgrade-5_5_41mysql-upgrade-5_5_51mysql-upgrade-5_6_32mysql-upgrade-5_7_14 | Dec 21, 2016 | Dec 13, 2016 | |
| Oracle_linux | — | oracle-linux-upgrade-mariadboracle-linux-upgrade-mariadb-benchoracle-linux-upgrade-mariadb-develoracle-linux-upgrade-mariadb-embeddedoracle-linux-upgrade-mariadb-embedded-develoracle-linux-upgrade-mariadb-libsoracle-linux-upgrade-mariadb-serveroracle-linux-upgrade-mariadb-test | Aug 8, 2017 | Oct 19, 2016 |
| Redhat_linux | — | redhat-upgrade-mariadbredhat-upgrade-mariadb-benchredhat-upgrade-mariadb-debuginforedhat-upgrade-mariadb-develredhat-upgrade-mariadb-embeddedredhat-upgrade-mariadb-embedded-develredhat-upgrade-mariadb-libsredhat-upgrade-mariadb-serverredhat-upgrade-mariadb-test | Aug 4, 2017 | Dec 13, 2016 |
| Suse | — | suse-upgrade-libmariadbd-develsuse-upgrade-libmariadbd19suse-upgrade-libmysqlclient-develsuse-upgrade-libmysqlclient18suse-upgrade-libmysqlclient18-32bitsuse-upgrade-libmysqlclient_r18suse-upgrade-libmysqlclient_r18-32bitsuse-upgrade-libmysqld-develsuse-upgrade-libmysqld18suse-upgrade-libmysqld19suse-upgrade-mariadbsuse-upgrade-mariadb-100-errormessagessuse-upgrade-mariadb-clientsuse-upgrade-mariadb-errormessagessuse-upgrade-mariadb-tools | Feb 8, 2017 | Dec 13, 2016 |
| Ubuntu | ubuntu-upgrade-mariadb-10-0ubuntu-upgrade-mysql-5-5 | Nov 19, 2024 | Dec 13, 2016 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub