mysqld_safe in Oracle MySQL through 5.5.51 5.6.x through 5.6.32 and 5.7.x through 5.7.14; MariaDB; Percona Server before 5.5.51-38.2 5.6.x before 5.6.32-78-1 and 5.7.x before 5.7.14-8; and Percona XtraDB Cluster before 5.5.41-37.0 5.6.x before 5.6.32-25.17 and 5.7.x before 5.7.14-26.17 when using file-based logging allows local users with access to the mysql account to gain root privileges via a symlink attack on error logs and possibly other files.

🗓️ 25 Sep 2020 07:00:00Reported by MicrosoftType

Local mysql users can gain root via error log symlink in affected MySQL, MariaDB, and Percona versions.

Reporter	Title	Published	Views	Family All 289
0day.today	MySQL / MariaDB / PerconaDB - 'mysql' System User Privilege Escalation / Race Condition	2 Nov 201600:00	–	zdt
0day.today	MySQL / MariaDB / PerconaDB - 'root' Privilege Escalation Vulnerability	2 Nov 201600:00	–	zdt
IBM Security Bulletins	Security Bulletin: IBM Security Guardium Database Activity Monitor is affected by the Open Source Oracle MySQL Vulnerabilities (CVE-2016-6664)	16 Jun 201821:48	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in MariaDB affect PowerKVM	18 Jun 201801:38	–	ibm
FreeBSD	MySQL -- multiple vulnerabilities	13 Sep 201600:00	–	freebsd
Tenable Nessus	MariaDB Server 10.0.x < 10.0.28 Multiple Vulnerabilities	4 Nov 201600:00	–	nessus
Tenable Nessus	MariaDB Server 5.5.x < 5.5.54 Multiple Vulnerabilities	26 Jan 201700:00	–	nessus
Tenable Nessus	MariaDB Server 10.0.x < 10.0.29 Multiple Vulnerabilities	26 Jan 201700:00	–	nessus
Tenable Nessus	MariaDB Server 10.1.x < 10.1.21 Multiple Vulnerabilities	26 Jan 201700:00	–	nessus
Tenable Nessus	CentOS 7 : mariadb (CESA-2017:2192)	25 Aug 201700:00	–	nessus