Race condition in Oracle MySQL before 5.5.52, 5.6.x before 5.6.33, 5.7.x before 5.7.15, and 8.x before 8.0.1; MariaDB before 5.5.52, 10.0.x before 10.0.28, and 10.1.x before 10.1.18; Percona Server before 5.5.51-38.2, 5.6.x before 5.6.32-78-1, and 5.7.x before 5.7.14-8; and Percona XtraDB Cluster before 5.5.41-37.0, 5.6.x before 5.6.32-25.17, and 5.7.x before 5.7.14-26.17 allows local users with certain permissions to gain privileges by leveraging use of my_copystat by REPAIR TABLE to repair a MyISAM table.
CVSS Details
- CVSS 3.1 Base Score: 7
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | alpine-linux-upgrade-mariadb | Sep 20, 2017 | Dec 13, 2016 |
| Amazon_linux | — | amazon-linux-upgrade-mysql51 | Feb 23, 2017 | Dec 13, 2016 |
| Centos_linux | — | centos-upgrade-mysqlcentos-upgrade-mysql-benchcentos-upgrade-mysql-debuginfocentos-upgrade-mysql-develcentos-upgrade-mysql-embeddedcentos-upgrade-mysql-embedded-develcentos-upgrade-mysql-libscentos-upgrade-mysql-servercentos-upgrade-mysql-test | Jul 1, 2017 | Dec 13, 2016 |
| Debian | debian-upgrade-mariadb-10-0debian-upgrade-mysql-5-5 | Nov 12, 2016 | Nov 11, 2016 | |
| F5 Big Ip | f5-bigip-upgrade-latest | Jun 17, 2026 | Feb 3, 2017 | |
| Freebsd | freebsd-upgrade-package-mariadb55-clientfreebsd-upgrade-package-mariadb55-serverfreebsd-upgrade-package-mariadb100-clientfreebsd-upgrade-package-mariadb100-serverfreebsd-upgrade-package-mariadb101-clientfreebsd-upgrade-package-mariadb101-serverfreebsd-upgrade-package-mysql55-clientfreebsd-upgrade-package-mysql55-serverfreebsd-upgrade-package-mysql56-clientfreebsd-upgrade-package-mysql56-serverfreebsd-upgrade-package-mysql57-clientfreebsd-upgrade-package-mysql57-serverfreebsd-upgrade-package-percona55-clientfreebsd-upgrade-package-percona55-serverfreebsd-upgrade-package-percona56-clientfreebsd-upgrade-package-percona56-server | Jan 15, 2017 | Jan 14, 2017 | |
| Huawei Euleros 2_0_sp1 | huawei-euleros-2_0_sp1-upgrade-mariadbhuawei-euleros-2_0_sp1-upgrade-mariadb-benchhuawei-euleros-2_0_sp1-upgrade-mariadb-develhuawei-euleros-2_0_sp1-upgrade-mariadb-embeddedhuawei-euleros-2_0_sp1-upgrade-mariadb-libshuawei-euleros-2_0_sp1-upgrade-mariadb-serverhuawei-euleros-2_0_sp1-upgrade-mariadb-test | Nov 30, 2017 | Dec 13, 2016 | |
| Mariadb Mariadb | View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗ | mariadb-mariadb-upgrade-latest | Mar 4, 2025 | Dec 13, 2016 |
| Oracle Mysql | mysql-upgrade-5_5_41mysql-upgrade-5_5_51mysql-upgrade-5_5_52mysql-upgrade-5_6_32mysql-upgrade-5_6_33mysql-upgrade-5_7_14mysql-upgrade-5_7_15mysql-upgrade-8_0_1 | Jan 23, 2017 | Dec 13, 2016 | |
| Oracle_linux | — | oracle-linux-upgrade-mariadboracle-linux-upgrade-mariadb-benchoracle-linux-upgrade-mariadb-develoracle-linux-upgrade-mariadb-embeddedoracle-linux-upgrade-mariadb-embedded-develoracle-linux-upgrade-mariadb-libsoracle-linux-upgrade-mariadb-serveroracle-linux-upgrade-mariadb-testoracle-linux-upgrade-mysqloracle-linux-upgrade-mysql-benchoracle-linux-upgrade-mysql-develoracle-linux-upgrade-mysql-embeddedoracle-linux-upgrade-mysql-embedded-develoracle-linux-upgrade-mysql-libsoracle-linux-upgrade-mysql-serveroracle-linux-upgrade-mysql-test | Dec 13, 2016 | Sep 12, 2016 |
| Redhat_linux | no-fix-redhat-rpm-packageredhat-upgrade-mysqlredhat-upgrade-mysql-benchredhat-upgrade-mysql-debuginforedhat-upgrade-mysql-develredhat-upgrade-mysql-embeddedredhat-upgrade-mysql-embedded-develredhat-upgrade-mysql-libsredhat-upgrade-mysql-serverredhat-upgrade-mysql-test | Dec 13, 2016 | Dec 13, 2016 | |
| Suse | — | suse-upgrade-libmariadbd-develsuse-upgrade-libmariadbd19suse-upgrade-libmysqlclient-develsuse-upgrade-libmysqlclient18suse-upgrade-libmysqlclient18-32bitsuse-upgrade-libmysqlclient_r18suse-upgrade-libmysqlclient_r18-32bitsuse-upgrade-libmysqld-develsuse-upgrade-libmysqld18suse-upgrade-libmysqld19suse-upgrade-mariadbsuse-upgrade-mariadb-100-errormessagessuse-upgrade-mariadb-clientsuse-upgrade-mariadb-errormessagessuse-upgrade-mariadb-tools | Dec 13, 2016 | Dec 13, 2016 |
| Ubuntu | ubuntu-upgrade-mariadb-10-0ubuntu-upgrade-mariadb-5-5ubuntu-upgrade-mysql-5-5ubuntu-upgrade-percona-xtradb-cluster-5-6 | Nov 19, 2024 | Dec 13, 2016 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub