Lucene search
RedHatRHSA-2016:2058HistoryOct 13, 2016 - 5:07 a.m.
(RHSA-2016:2058) Important: mariadb-galera security update
2016-10-1305:07:34
access.redhat.com
20
9.8 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
10 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C
0.005 Low
EPSS
Percentile
76.2%
MariaDB is a multi-user, multi-threaded SQL database server that is binary compatible with MySQL. Galera is a synchronous multi-master cluster for MariaDB.
Security Fix(es):
- It was discovered that the MySQL logging functionality allowed writing to MySQL configuration files. An administrative database user, or a database user with FILE privileges, could possibly use this flaw to run arbitrary commands with root privileges on the system running the database server. (CVE-2016-6662)
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| RedHat | 6 | x86_64 | mariadb-galera-debuginfo | <Β 5.5.42-1.1.el6ost | mariadb-galera-debuginfo-5.5.42-1.1.el6ost.x86_64.rpm |
| RedHat | 6 | x86_64 | mariadb-galera-common | <Β 5.5.42-1.1.el6ost | mariadb-galera-common-5.5.42-1.1.el6ost.x86_64.rpm |
| RedHat | 6 | x86_64 | mariadb-galera-server | <Β 5.5.42-1.1.el6ost | mariadb-galera-server-5.5.42-1.1.el6ost.x86_64.rpm |
Related
nessus
nessus
SUSE SLES12 Security Update : mariadb (SUSE-SU-2016:2395-1)
2016-09-28 00:00:00
Ubuntu 14.04 LTS / 16.04 LTS : MySQL vulnerability (USN-3078-1)
2016-09-15 00:00:00
Fedora 23 : 1:mariadb (2016-58f90ae3cc)
2016-10-06 00:00:00
redhat
redhat
(RHSA-2016:2060) Important: mariadb-galera security and bug fix update
2016-10-13 05:07:39
(RHSA-2016:2061) Important: mariadb-galera security and bug fix update
2016-10-13 05:07:42
(RHSA-2016:2059) Important: mariadb-galera security and bug fix update
2016-10-13 05:07:36
osv
osv
mysql-5.5 - security update
2016-09-16 00:00:00
CVE-2017-15365
2018-01-25 16:29:00
CVE-2020-10996
2020-04-27 13:15:12
veracode
veracode
Arbitrary Code Execution
2019-01-15 09:13:35
f5
f5
SOL72255110 - MySQL vulnerability CVE-2016-6662
2016-09-26 00:00:00
K72255110 : MySQL vulnerability CVE-2016-6662
2016-09-26 00:00:00
prion
prion
Design/Logic Flaw
2016-09-20 18:59:00
slackware
slackware
[slackware-security] mariadb / mysql
2016-09-13 20:15:07
debian
debian
[SECURITY] [DLA 624-1] mysql-5.5 security update
2016-09-16 15:38:27
[SECURITY] [DSA 3666-1] mysql-5.5 security update
2016-09-14 15:13:55
[SECURITY] [DSA 3666-1] mysql-5.5 security update
2016-09-14 15:13:34
suse
suse
Security update for mariadb (important)
2016-09-27 21:12:05
Security update for mariadb (important)
2016-09-27 19:14:25
Security update for mariadb (important)
2016-10-04 17:09:01
openvas
openvas
Slackware: Security Advisory (SSA:2016-257-01)
2022-04-21 00:00:00
Debian Security Advisory DSA 3666-1 (mysql-5.5 - security update)
2016-09-14 00:00:00
Debian: Security Advisory (DLA-624-1)
2023-03-08 00:00:00
fedora
fedora
[SECURITY] Fedora 23 Update: mariadb-10.0.27-1.fc23
2016-10-03 20:22:41
[SECURITY] Fedora 24 Update: community-mysql-5.7.15-1.fc24
2016-09-27 03:57:17
zdt
zdt
ubuntu
ubuntu
MySQL vulnerability
2016-09-13 00:00:00
freebsd
freebsd
Remote-Code-Execution vulnerability in mysql and its variants CVE 2016-6662
2016-09-12 00:00:00
mysql -- Remote Root Code Execution
2016-09-12 00:00:00
Remote-Code-Execution vulnerability in mysql and its variants CVE 2016-6662
2016-09-12 00:00:00
alpinelinux
alpinelinux
CVE-2016-6662
2016-09-20 18:59:00
cloudfoundry
cloudfoundry
CVE-2016-6662 - Multiple MySQL Vulnerabilities | Cloud Foundry
2016-09-28 00:00:00
ibm
ibm
ubuntucve
ubuntucve
CVE-2016-6662
2016-09-12 00:00:00
redhatcve
redhatcve
CVE-2016-6662
2016-12-15 20:18:44
amazon
amazon
Important: mysql55, mysql56
2016-10-12 17:00:00
Important: mysql51
2017-02-22 18:00:00
mariadbunix
mariadbunix
CVE-2016-6662
2016-09-20 18:59:00
cve
cve
CVE-2016-6662
2016-09-20 18:59:00
archlinux
archlinux
mariadb: multiple issues
2016-09-14 00:00:00
thn
thn
New MySQL Zero Days β Hacking Website Databases
2016-09-12 06:14:00
Why Database Patching Best Practice Just Doesn't Work and How to Fix It
2021-10-18 16:00:00
threatpost
threatpost
Critical MySQL Vulnerability Disclosed
2016-09-12 11:00:58
Critical MySQL Vulnerabilities Can Lead to Server Compromise
2016-11-02 14:02:10
exploitpack
exploitpack
exploitdb
exploitdb
packetstorm
packetstorm
MySQL 5.7.15 / 5.6.33 / 5.5.52 Remote Code Execution
2016-09-12 00:00:00
MySQL / MariaDB / PerconaDB Root Privilege Escalation
2016-11-02 00:00:00
MySQL / MariaDB / PerconaDB Privilege Escalation / Race Condition
2016-11-02 00:00:00
seebug
seebug
MySQL <= 5.7.15 remote Root code execution vulnerability
2016-09-13 00:00:00
MySQL / MariaDB / PerconaDB elevation of privilege vulnerability, CVE-2016-6664οΌ
2016-11-02 00:00:00
MySQL / MariaDB / PerconaDB ζζ/ζ‘δ»Άη«δΊζΌζ΄οΌCVE-2016-6663οΌ
2016-11-02 00:00:00
checkpoint_advisories
checkpoint_advisories
MySQL Remote Code Execution (CVE-2016-6662; CVE-2016-6663; CVE-2016-6664)
2016-09-20 00:00:00
oraclelinux
oraclelinux
mysql security update
2017-01-24 00:00:00
mariadb security and bug fix update
2016-11-09 00:00:00
mariadb security and bug fix update
2017-08-07 00:00:00
centos
centos
mysql security update
2017-01-26 22:35:43
mariadb security update
2016-11-25 16:00:08
gentoo
gentoo
MariaDB and MySQL: Multiple vulnerabilities
2017-01-01 00:00:00
oracle
oracle
Oracle Critical Patch Update - October 2016
2016-10-18 00:00:00
9.8 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
10 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C
0.005 Low
EPSS
Percentile
76.2%
Related for RHSA-2016:2058