CVE-2016-6664

🗓️ 13 Dec 2016 21:00:00Reported by mitreType

cve🔗 web.nvd.nist.gov📰️ 1 Media mentions👁 328 Views🌐 WEB

MySQL, MariaDB, Percona Server, Percona XtraDB Cluster symlink attack vulnerability

Reporter	Title	Published	Views	Family All 287
0day.today	MySQL / MariaDB / PerconaDB - 'mysql' System User Privilege Escalation / Race Condition	2 Nov 201600:00	–	zdt
0day.today	MySQL / MariaDB / PerconaDB - 'root' Privilege Escalation Vulnerability	2 Nov 201600:00	–	zdt
IBM Security Bulletins	Security Bulletin: IBM Security Guardium Database Activity Monitor is affected by the Open Source Oracle MySQL Vulnerabilities (CVE-2016-6664)	16 Jun 201821:48	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in MariaDB affect PowerKVM	18 Jun 201801:38	–	ibm
FreeBSD	MySQL -- multiple vulnerabilities	13 Sep 201600:00	–	freebsd
Tenable Nessus	MariaDB Server 10.0.x < 10.0.28 Multiple Vulnerabilities	4 Nov 201600:00	–	nessus
Tenable Nessus	MariaDB Server 5.5.x < 5.5.54 Multiple Vulnerabilities	26 Jan 201700:00	–	nessus
Tenable Nessus	MariaDB Server 10.0.x < 10.0.29 Multiple Vulnerabilities	26 Jan 201700:00	–	nessus
Tenable Nessus	MariaDB Server 10.1.x < 10.1.21 Multiple Vulnerabilities	26 Jan 201700:00	–	nessus
Tenable Nessus	CentOS 7 : mariadb (CESA-2017:2192)	25 Aug 201700:00	–	nessus

NVD

Node

oracle mysqlRange5.5.0–5.5.51

oracle mysqlRange5.6.0–5.6.32

oracle mysqlRange5.7.0–5.7.14

Node

mariadb mariadbRange5.5.0–5.5.54

mariadb mariadbRange10.0.0–10.0.29

mariadb mariadbRange10.1.0–10.1.21

Node

percona percona_serverRange5.5–5.5.51-38.2

percona percona_serverRange5.6–5.6.32-78.1

Node

percona xtradb_clusterRange5.5–5.5.41-37.0

percona xtradb_clusterRange5.6–5.6.32-25.17

percona xtradb_clusterRange5.7–5.7.14-26.17

Source	Link
access	www.access.redhat.com/errata/RHSA-2018:0279
seclists	www.seclists.org/fulldisclosure/2016/Nov/4
security	www.security.gentoo.org/glsa/201702-18
oracle	www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html
access	www.access.redhat.com/errata/RHSA-2017:2192
packetstormsecurity	www.packetstormsecurity.com/files/139491/MySQL-MariaDB-PerconaDB-Root-Privilege-Escalation.html
legalhackers	www.legalhackers.com/advisories/MySQL-Maria-Percona-RootPrivEsc-CVE-2016-6664-5617-Exploit.html
access	www.access.redhat.com/errata/RHSA-2018:0574
securityfocus	www.securityfocus.com/archive/1/539695/100/0/threaded
rhn	www.rhn.redhat.com/errata/RHSA-2016-2749.html

Parameter	Position	Path	Description	CWE
path_to_error.log	path	/var/lib/mysql/xenial-percona.err	Symlink attack on MySQL error log used by mysqld_safe to escalate privileges via unsafe log handling (PoC CVE-2016-6664).	CWE-59

17 Jun 2026 00:51Current

6.7Medium risk

Vulners AI Score6.7

CVSS 26.9

CVSS 3.17

EPSS0.0308