Security Bulletin: MySQL 0-day exploit (CVE-2016-6662)

Question

Security Bulletin: MySQL 0-day exploit (CVE-2016-6662)

Answer

Summary

Aspera software is not affected by the 0-day MySQL vulnerability.

This vulnerability allows attackers to remotely inject SQL code with root privileges and thus compromise a system. The attack would involve modifying configuration files to include a path to a malicious code library to be loaded when MySQL is restarted.

Impact

Aspera products are not exposed to this vulnerability.

[{“Business Unit”:{“code”:“BU053”,“label”:“Cloud & Data Platform”},“Product”:{“code”:“SS8NDZ”,“label”:“IBM Aspera”},“Component”:“”,“Platform”:[{“code”:“PF025”,“label”:“Platform Independent”}],“Version”:“All Versions”,“Edition”:“”,“Line of Business”:{“code”:“LOB45”,“label”:“Automation”}}]