New MySQL Zero Days — Hacking Website Databases

🗓️ 12 Sep 2016 06:14:00Reported by Mohit KumarType

MySQL zero-day vulnerabilities discovered in MySQL, MariaDB, and PerconaDB allow attacker to inject malicious settings, execute arbitrary code with root privileges, and compromise server. Oracle yet to release patch.

Reporter	Title	Published	Views	Family All 447
IBM Security Bulletins	Security Bulletin: MySQL 0-day exploit (CVE-2016-6662)	18 Jun 202617:57	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in mariadb affect PowerKVM	18 Jun 201801:34	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Security Guardium Database Activity Monitor is affected by Open Source MySQL MySQL Vulnerabilities (CVE-2016-6663)	16 Jun 201821:48	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Security Guardium is affected by Open Source Oracle MySQL Vulnerabilities (CVE-2016-6662)	16 Jun 201821:47	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in openssl, gnutl, mysql, kernel, glibc, ntp shipped with SmartCloud Entry Appliance	19 Jul 202000:49	–	ibm
0day.today	MySQL / MariaDB / PerconaDB 5.5.52 / 5.6.33 / 5.7.15 - Code Execution / Privilege Escalation	12 Sep 201600:00	–	zdt
0day.today	MySQL / MariaDB / PerconaDB - 'mysql' System User Privilege Escalation / Race Condition	2 Nov 201600:00	–	zdt
0day.today	MySQL / MariaDB / PerconaDB - 'root' Privilege Escalation Vulnerability	2 Nov 201600:00	–	zdt
FreeBSD	MySQL -- multiple vulnerabilities	13 Sep 201600:00	–	freebsd
FreeBSD	mysql -- Remote Root Code Execution	12 Sep 201600:00	–	freebsd