CVE-2016-0666

Unspecified vulnerability in Oracle MySQL 5.5.48 and earlier, 5.6.29 and earlier, and 5.7.11 and...

5.5 MediumFix available

Unspecified vulnerability in Oracle MySQL 5.5.48 and earlier, 5.6.29 and earlier, and 5.7.11 and earlier and MariaDB before 5.5.49, 10.0.x before 10.0.25, and 10.1.x before 10.1.14 allows local users to affect availability via vectors related to Security: Privileges.

Attack profile

How easy it is to exploit

Attack vector: Local
Complexity: Low
Privileges needed: Low
User interaction: None

What an attacker can affect

Confidentiality: None
Integrity: None
Availability: High

Exploit likelihood

1.78%Up 0.2 points since Feb 4, 2022

What each source reports

NVD Score used 5.5

Record: CVE-2016-0666
CVSS 3.0: 5.5 MediumCVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CVSS 2.0: 3.5 LowAV:N/AC:M/Au:S/C:N/I:N/A:P
Updated: 2026-11-02

CVE List No score

Record: CVE-2016-0666
Updated: 2026-11-02

EUVDEUVD-2016-0701 No score

Record: EUVD-2016-0701
Updated: 2026-11-03

GitHub AdvisoriesGHSA-g7qh-x4rx-fcwv 5.5

Unspecified vulnerability in Oracle MySQL 5.5.48 and earlier, 5.6.29 and earlier, and 5.7.11 and...

Record: GHSA-g7qh-x4rx-fcwv
CVSS 3.0: 5.5 MediumCVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Updated: 2026-11-02

OSVALPINE-CVE-2016-0666 5.5

Record: ALPINE-CVE-2016-0666
CVSS 3.0: 5.5 MediumCVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Updated: 2026-11-02

OSV 5.5

Record: CVE-2016-0666
CVSS 3.0: 5.5 MediumCVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Updated: 2026-11-02

Show 13 moreShow less

OSVRHSA-2016:0705 7.5

Red Hat Security Advisory: rh-mysql56-mysql security update

Record: RHSA-2016:0705
CVSS 3.0: 7.5 HighCVSS:3.0/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H
Updated: 2026-11-02

OSVRHSA-2016:1132 7.5

Red Hat Security Advisory: rh-mariadb100-mariadb security update

Record: RHSA-2016:1132
CVSS 3.0: 7.5 HighCVSS:3.0/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H
Updated: 2026-11-02

OSVRHSA-2016:1480 7.5

Red Hat Security Advisory: mysql55-mysql security update

Record: RHSA-2016:1480
CVSS 3.0: 7.5 HighCVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVRHSA-2016:1481 7.5

Red Hat Security Advisory: mariadb55-mariadb security update

Record: RHSA-2016:1481
CVSS 3.0: 7.5 HighCVSS:3.0/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H
Updated: 2026-11-02

OSVRHSA-2016:1602 7.5

Red Hat Security Advisory: mariadb security update

Record: RHSA-2016:1602
CVSS 3.0: 7.5 HighCVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVUBUNTU-CVE-2016-0666 5.5

Record: UBUNTU-CVE-2016-0666
CVSS 3.0: 5.5 MediumCVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Updated: 2026-11-02

OSVMGASA-2016-0182 No score

Updated mariadb packages fix security vulnerabilities

Updated mariadb packages fix security vulnerabilities:

The mariadb package has been updated to version 10.0.25. It fixes several security issues (CVE-2016-0643, CVE-2016-0647, CVE-2016-0648, CVE-2016-0655, CVE-2016-0666) and other bugs. See the upstream release notes for details.

Record: MGASA-2016-0182
Updated: 2026-11-02

OSVopenSUSE-SU-2024:10200-1 No score

libmysql56client18-32bit-5.6.34-1.1 on GA media

These are all security issues fixed in the libmysql56client18-32bit-5.6.34-1.1 package on the GA media of openSUSE Tumbleweed.

Record: openSUSE-SU-2024:10200-1
Updated: 2026-11-02

OSVSUSE-SU-2016:1279-1 No score

Security update for mysql

mysql was updated to version 5.5.49 to fix 13 security issues.

These security issues were fixed:

CVE-2016-0644: Unspecified vulnerability allowed local users to affect availability via vectors related to DDL (bsc#976341).
CVE-2016-0646: Unspecified vulnerability allowed local users to affect availability via vectors related to DML (bsc#976341).
CVE-2016-0647: Unspecified vulnerability allowed local users to affect availability via vectors related to FTS (bsc#976341).
CVE-2016-0640: Unspecified vulnerability allowed local users to affect integrity and availability via vectors related to DML (bsc#976341).
CVE-2016-0641: Unspecified vulnerability allowed local users to affect confidentiality and availability via vectors related to MyISAM (bsc#976341).
CVE-2016-0642: Unspecified vulnerability allowed local users to affect integrity and availability via vectors related to Federated (bsc#976341).
CVE-2016-0643: Unspecified vulnerability allowed local users to affect confidentiality via vectors related to DML (bsc#976341).
CVE-2016-0666: Unspecified vulnerability allowed local users to affect availability via vectors related to Security: Privileges (bsc#976341).
CVE-2016-0651: Unspecified vulnerability allowed local users to affect availability via vectors related to Optimizer (bsc#976341).
CVE-2016-0650: Unspecified vulnerability allowed local users to affect availability via vectors related to Replication (bsc#976341).
CVE-2016-0648: Unspecified vulnerability allowed local users to affect availability via vectors related to PS (bsc#976341).
CVE-2016-0649: Unspecified vulnerability allowed local users to affect availability via vectors related to PS (bsc#976341).
CVE-2016-2047: The ssl_verify_server_cert function in sql-common/client.c did not properly verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509 certificate, which allowed man-in-the-middle attackers to spoof SSL servers via a '/CN=' string in a field in a certificate, as demonstrated by '/OU=/CN=bar.com/CN=foo.com (bsc#963806).

More details are available at

Record: SUSE-SU-2016:1279-1
Updated: 2026-11-02

OSVSUSE-SU-2016:1619-1 No score

Security update for mariadb

mariadb was updated to version 10.0.25 to fix 25 security issues.

These security issues were fixed:

CVE-2016-0505: Unspecified vulnerability allowed remote authenticated users to affect availability via unknown vectors related to Options (bsc#980904).
CVE-2016-0546: Unspecified vulnerability allowed local users to affect confidentiality, integrity, and availability via unknown vectors related to Client (bsc#980904).
CVE-2016-0596: Unspecified vulnerability allowed remote authenticated users to affect availability via vectors related to DML (bsc#980904).
CVE-2016-0597: Unspecified vulnerability allowed remote authenticated users to affect availability via unknown vectors related to Optimizer (bsc#980904).
CVE-2016-0598: Unspecified vulnerability allowed remote authenticated users to affect availability via vectors related to DML (bsc#980904).
CVE-2016-0600: Unspecified vulnerability allowed remote authenticated users to affect availability via unknown vectors related to InnoDB (bsc#980904).
CVE-2016-0606: Unspecified vulnerability allowed remote authenticated users to affect integrity via unknown vectors related to encryption (bsc#980904).
CVE-2016-0608: Unspecified vulnerability allowed remote authenticated users to affect availability via vectors related to UDF (bsc#980904).
CVE-2016-0609: Unspecified vulnerability allowed remote authenticated users to affect availability via unknown vectors related to privileges (bsc#980904).
CVE-2016-0616: Unspecified vulnerability allowed remote authenticated users to affect availability via unknown vectors related to Optimizer (bsc#980904).
CVE-2016-0640: Unspecified vulnerability allowed local users to affect integrity and availability via vectors related to DML (bsc#980904).
CVE-2016-0641: Unspecified vulnerability allowed local users to affect confidentiality and availability via vectors related to MyISAM (bsc#980904).
CVE-2016-0642: Unspecified vulnerability allowed local users to affect integrity and availability via vectors related to Federated (bsc#980904).
CVE-2016-0643: Unspecified vulnerability allowed local users to affect confidentiality via vectors related to DML (bsc#980904).
CVE-2016-0644: Unspecified vulnerability allowed local users to affect availability via vectors related to DDL (bsc#980904).
CVE-2016-0646: Unspecified vulnerability allowed local users to affect availability via vectors related to DML (bsc#980904).
CVE-2016-0647: Unspecified vulnerability allowed local users to affect availability via vectors related to FTS (bsc#980904).
CVE-2016-0648: Unspecified vulnerability allowed local users to affect availability via vectors related to PS (bsc#980904).
CVE-2016-0649: Unspecified vulnerability allowed local users to affect availability via vectors related to PS (bsc#980904).
CVE-2016-0650: Unspecified vulnerability allowed local users to affect availability via vectors related to Replication (bsc#980904).
CVE-2016-0651: Unspecified vulnerability allowed local users to affect availability via vectors related to Optimizer (bsc#980904).
CVE-2016-0655: Unspecified vulnerability allowed local users to affect availability via vectors related to InnoDB (bsc#980904).
CVE-2016-0666: Unspecified vulnerability allowed local users to affect availability via vectors related to Security: Privileges (bsc#980904).
CVE-2016-0668: Unspecified vulnerability allowed local users to affect availability via vectors related to InnoDB (bsc#980904).
CVE-2016-2047: The ssl_verify_server_cert function in sql-common/client.c did not properly verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509 certificate, which allowed man-in-the-middle attackers to spoof SSL servers via a '/CN=' string in a field in a certificate, as demonstrated by '/OU=/CN=bar.com/CN=foo.com (bsc#963806).

These non-security issues were fixed:

bsc#960961: Use 'plugin-load-add' instead of…

Record: SUSE-SU-2016:1619-1
Updated: 2026-11-02

OSVSUSE-SU-2016:1620-1 No score

Security update for mariadb

mariadb was updated to version 10.0.25 to fix 25 security issues.

These security issues were fixed:

CVE-2016-0505: Unspecified vulnerability allowed remote authenticated users to affect availability via unknown vectors related to Options (bsc#980904).
CVE-2016-0546: Unspecified vulnerability allowed local users to affect confidentiality, integrity, and availability via unknown vectors related to Client (bsc#980904).
CVE-2016-0596: Unspecified vulnerability allowed remote authenticated users to affect availability via vectors related to DML (bsc#980904).
CVE-2016-0597: Unspecified vulnerability allowed remote authenticated users to affect availability via unknown vectors related to Optimizer (bsc#980904).
CVE-2016-0598: Unspecified vulnerability allowed remote authenticated users to affect availability via vectors related to DML (bsc#980904).
CVE-2016-0600: Unspecified vulnerability allowed remote authenticated users to affect availability via unknown vectors related to InnoDB (bsc#980904).
CVE-2016-0606: Unspecified vulnerability allowed remote authenticated users to affect integrity via unknown vectors related to encryption (bsc#980904).
CVE-2016-0608: Unspecified vulnerability allowed remote authenticated users to affect availability via vectors related to UDF (bsc#980904).
CVE-2016-0609: Unspecified vulnerability allowed remote authenticated users to affect availability via unknown vectors related to privileges (bsc#980904).
CVE-2016-0616: Unspecified vulnerability allowed remote authenticated users to affect availability via unknown vectors related to Optimizer (bsc#980904).
CVE-2016-0640: Unspecified vulnerability allowed local users to affect integrity and availability via vectors related to DML (bsc#980904).
CVE-2016-0641: Unspecified vulnerability allowed local users to affect confidentiality and availability via vectors related to MyISAM (bsc#980904).
CVE-2016-0642: Unspecified vulnerability allowed local users to affect integrity and availability via vectors related to Federated (bsc#980904).
CVE-2016-0643: Unspecified vulnerability allowed local users to affect confidentiality via vectors related to DML (bsc#980904).
CVE-2016-0644: Unspecified vulnerability allowed local users to affect availability via vectors related to DDL (bsc#980904).
CVE-2016-0646: Unspecified vulnerability allowed local users to affect availability via vectors related to DML (bsc#980904).
CVE-2016-0647: Unspecified vulnerability allowed local users to affect availability via vectors related to FTS (bsc#980904).
CVE-2016-0648: Unspecified vulnerability allowed local users to affect availability via vectors related to PS (bsc#980904).
CVE-2016-0649: Unspecified vulnerability allowed local users to affect availability via vectors related to PS (bsc#980904).
CVE-2016-0650: Unspecified vulnerability allowed local users to affect availability via vectors related to Replication (bsc#980904).
CVE-2016-0651: Unspecified vulnerability allowed local users to affect availability via vectors related to Optimizer (bsc#980904).
CVE-2016-0655: Unspecified vulnerability allowed local users to affect availability via vectors related to InnoDB (bsc#980904).
CVE-2016-0666: Unspecified vulnerability allowed local users to affect availability via vectors related to Security: Privileges (bsc#980904).
CVE-2016-0668: Unspecified vulnerability allowed local users to affect availability via vectors related to InnoDB (bsc#980904).
CVE-2016-2047: The ssl_verify_server_cert function in sql-common/client.c did not properly verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509 certificate, which allowed man-in-the-middle attackers to spoof SSL servers via a '/CN=' string in a field in a certificate, as demonstrated by '/OU=/CN=bar.com/CN=foo.com (bsc#963806).

These non-security issues were fixed:

bsc#961935: Remove the leftovers of 'openSUSE' string…

Record: SUSE-SU-2016:1620-1
Updated: 2026-11-02

OSVUSN-2953-1 No score

mysql-5.5, mysql-5.6 vulnerabilities

Multiple security issues were discovered in MySQL and this update includes new upstream MySQL versions to fix these issues.

MySQL has been updated to 5.5.49 in Ubuntu 12.04 LTS and Ubuntu 14.04 LTS. Ubuntu 15.10 has been updated to MySQL 5.6.30.

In addition to security fixes, the updated packages contain bug fixes, new features, and possibly incompatible changes.

Please see the following for more information: http://dev.mysql.com/doc/relnotes/mysql/5.5/en/news-5-5-48.html http://dev.mysql.com/doc/relnotes/mysql/5.5/en/news-5-5-49.html http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-29.html http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-30.html http://www.oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.html

Record: USN-2953-1
Updated: 2026-11-02

OSVUSN-2954-1 No score

mysql-5.7 vulnerabilities

Multiple security issues were discovered in MySQL and this update includes new upstream MySQL versions to fix these issues.

MySQL has been updated to 5.7.12 in Ubuntu 16.04 LTS.

In addition to security fixes, the updated packages contain bug fixes, new features, and possibly incompatible changes.

Please see the following for more information: http://dev.mysql.com/doc/relnotes/mysql/5.7/en/news-5-7-12.html http://www.oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.html

Record: USN-2954-1
Updated: 2026-11-02

Affected products

Affected packages

Affected packages
Package	Affected	Fixed
`mariadb` Alpine:v3.2	5.5.20 up to 5.5.51-r0	5.5.51-r0
`mariadb` Alpine:v3.3	5.5.20 up to 10.1.17-r0	10.1.17-r0
`mysql-5.5` Debian:7 From an advisory covering 12 CVEs	before 5.5.49-0+deb7u1, plus listed versions 5.5.30+dfsg-1.15.5.31+dfsg-0+wheezy15.5.31+dfsg-15.5.33+dfsg-0+wheezy15.5.33+dfsg-1 Show 15 moreShow less 5.5.35+dfsg-0+wheezy15.5.35+dfsg-15.5.35+dfsg-25.5.37-0+wheezy15.5.37-15.5.38-0+wheezy15.5.39-15.5.40-0+wheezy15.5.40-15.5.41-0+wheezy15.5.42-15.5.43-0+deb7u15.5.44-0+deb7u15.5.46-0+deb7u15.5.47-0+deb7u1	5.5.49-0+deb7u1
`mysql-5.5` Debian:8 From an advisory covering 12 CVEs	before 5.5.49-0+deb8u1, plus listed versions 5.5.42-15.5.43-0+deb8u15.5.44-0+deb8u15.5.46-0+deb8u15.5.47-0+deb8u1	5.5.49-0+deb8u1
`mariadb-10.0` Debian:8 From an advisory covering 12 CVEs	before 10.0.25-0+deb8u1, plus listed versions 10.0.16-110.0.17-110.0.17-1~exp110.0.17-1~exp210.0.18-1~exp1 Show 30 moreShow less 10.0.19-110.0.20-0+deb8u110.0.20-110.0.20-210.0.20-310.0.21-110.0.21-210.0.21-310.0.22-0+deb8u110.0.22-110.0.22-210.0.22-2~exp110.0.22-2~exp210.0.22-310.0.22-410.0.22-4~exp110.0.22-510.0.22-610.0.23-0+deb8u110.0.23-110.0.23-210.0.23-310.0.24-110.0.24-210.0.24-310.0.24-410.0.24-4~exp110.0.24-510.0.24-610.0.24-7	10.0.25-0+deb8u1
`mariadb` Mageia:5 From an advisory covering 5 CVEs	before 10.0.25-1.mga5	10.0.25-1.mga5
`rh-mysql56-mysql` Red Hat:rhel_software_collections:2::el6 From an advisory covering 50 CVEs	before 0:5.6.30-1.el6	0:5.6.30-1.el6
`rh-mysql56-mysql-bench` Red Hat:rhel_software_collections:2::el6 From an advisory covering 50 CVEs	before 0:5.6.30-1.el6	0:5.6.30-1.el6
`rh-mysql56-mysql-common` Red Hat:rhel_software_collections:2::el6 From an advisory covering 50 CVEs	before 0:5.6.30-1.el6	0:5.6.30-1.el6
`rh-mysql56-mysql-config` Red Hat:rhel_software_collections:2::el6 From an advisory covering 50 CVEs	before 0:5.6.30-1.el6	0:5.6.30-1.el6

Show 120 moreShow less

Affected packages
Package	Affected	Fixed
`rh-mysql56-mysql-debuginfo` Red Hat:rhel_software_collections:2::el6 From an advisory covering 50 CVEs	before 0:5.6.30-1.el6	0:5.6.30-1.el6
`rh-mysql56-mysql-devel` Red Hat:rhel_software_collections:2::el6 From an advisory covering 50 CVEs	before 0:5.6.30-1.el6	0:5.6.30-1.el6
`rh-mysql56-mysql-errmsg` Red Hat:rhel_software_collections:2::el6 From an advisory covering 50 CVEs	before 0:5.6.30-1.el6	0:5.6.30-1.el6
`rh-mysql56-mysql-server` Red Hat:rhel_software_collections:2::el6 From an advisory covering 50 CVEs	before 0:5.6.30-1.el6	0:5.6.30-1.el6
`rh-mysql56-mysql-test` Red Hat:rhel_software_collections:2::el6 From an advisory covering 50 CVEs	before 0:5.6.30-1.el6	0:5.6.30-1.el6
`rh-mysql56-mysql` Red Hat:rhel_software_collections:2::el7 From an advisory covering 50 CVEs	before 0:5.6.30-1.el7	0:5.6.30-1.el7
`rh-mysql56-mysql-bench` Red Hat:rhel_software_collections:2::el7 From an advisory covering 50 CVEs	before 0:5.6.30-1.el7	0:5.6.30-1.el7
`rh-mysql56-mysql-common` Red Hat:rhel_software_collections:2::el7 From an advisory covering 50 CVEs	before 0:5.6.30-1.el7	0:5.6.30-1.el7
`rh-mysql56-mysql-config` Red Hat:rhel_software_collections:2::el7 From an advisory covering 50 CVEs	before 0:5.6.30-1.el7	0:5.6.30-1.el7
`rh-mysql56-mysql-debuginfo` Red Hat:rhel_software_collections:2::el7 From an advisory covering 50 CVEs	before 0:5.6.30-1.el7	0:5.6.30-1.el7
`rh-mysql56-mysql-devel` Red Hat:rhel_software_collections:2::el7 From an advisory covering 50 CVEs	before 0:5.6.30-1.el7	0:5.6.30-1.el7
`rh-mysql56-mysql-errmsg` Red Hat:rhel_software_collections:2::el7 From an advisory covering 50 CVEs	before 0:5.6.30-1.el7	0:5.6.30-1.el7
`rh-mysql56-mysql-server` Red Hat:rhel_software_collections:2::el7 From an advisory covering 50 CVEs	before 0:5.6.30-1.el7	0:5.6.30-1.el7
`rh-mysql56-mysql-test` Red Hat:rhel_software_collections:2::el7 From an advisory covering 50 CVEs	before 0:5.6.30-1.el7	0:5.6.30-1.el7
`rh-mariadb100-mariadb` Red Hat:rhel_software_collections:2::el6 From an advisory covering 58 CVEs	before 1:10.0.25-4.el6	1:10.0.25-4.el6
`rh-mariadb100-mariadb-bench` Red Hat:rhel_software_collections:2::el6 From an advisory covering 58 CVEs	before 1:10.0.25-4.el6	1:10.0.25-4.el6
`rh-mariadb100-mariadb-common` Red Hat:rhel_software_collections:2::el6 From an advisory covering 58 CVEs	before 1:10.0.25-4.el6	1:10.0.25-4.el6
`rh-mariadb100-mariadb-config` Red Hat:rhel_software_collections:2::el6 From an advisory covering 58 CVEs	before 1:10.0.25-4.el6	1:10.0.25-4.el6
`rh-mariadb100-mariadb-debuginfo` Red Hat:rhel_software_collections:2::el6 From an advisory covering 58 CVEs	before 1:10.0.25-4.el6	1:10.0.25-4.el6
`rh-mariadb100-mariadb-devel` Red Hat:rhel_software_collections:2::el6 From an advisory covering 58 CVEs	before 1:10.0.25-4.el6	1:10.0.25-4.el6
`rh-mariadb100-mariadb-errmsg` Red Hat:rhel_software_collections:2::el6 From an advisory covering 58 CVEs	before 1:10.0.25-4.el6	1:10.0.25-4.el6
`rh-mariadb100-mariadb-oqgraph-engine` Red Hat:rhel_software_collections:2::el6 From an advisory covering 58 CVEs	before 1:10.0.25-4.el6	1:10.0.25-4.el6
`rh-mariadb100-mariadb-server` Red Hat:rhel_software_collections:2::el6 From an advisory covering 58 CVEs	before 1:10.0.25-4.el6	1:10.0.25-4.el6
`rh-mariadb100-mariadb-test` Red Hat:rhel_software_collections:2::el6 From an advisory covering 58 CVEs	before 1:10.0.25-4.el6	1:10.0.25-4.el6
`rh-mariadb100-mariadb` Red Hat:rhel_software_collections:2::el7 From an advisory covering 58 CVEs	before 1:10.0.25-4.el7	1:10.0.25-4.el7
`rh-mariadb100-mariadb-bench` Red Hat:rhel_software_collections:2::el7 From an advisory covering 58 CVEs	before 1:10.0.25-4.el7	1:10.0.25-4.el7
`rh-mariadb100-mariadb-common` Red Hat:rhel_software_collections:2::el7 From an advisory covering 58 CVEs	before 1:10.0.25-4.el7	1:10.0.25-4.el7
`rh-mariadb100-mariadb-config` Red Hat:rhel_software_collections:2::el7 From an advisory covering 58 CVEs	before 1:10.0.25-4.el7	1:10.0.25-4.el7
`rh-mariadb100-mariadb-debuginfo` Red Hat:rhel_software_collections:2::el7 From an advisory covering 58 CVEs	before 1:10.0.25-4.el7	1:10.0.25-4.el7
`rh-mariadb100-mariadb-devel` Red Hat:rhel_software_collections:2::el7 From an advisory covering 58 CVEs	before 1:10.0.25-4.el7	1:10.0.25-4.el7
`rh-mariadb100-mariadb-errmsg` Red Hat:rhel_software_collections:2::el7 From an advisory covering 58 CVEs	before 1:10.0.25-4.el7	1:10.0.25-4.el7
`rh-mariadb100-mariadb-oqgraph-engine` Red Hat:rhel_software_collections:2::el7 From an advisory covering 58 CVEs	before 1:10.0.25-4.el7	1:10.0.25-4.el7
`rh-mariadb100-mariadb-server` Red Hat:rhel_software_collections:2::el7 From an advisory covering 58 CVEs	before 1:10.0.25-4.el7	1:10.0.25-4.el7
`rh-mariadb100-mariadb-test` Red Hat:rhel_software_collections:2::el7 From an advisory covering 58 CVEs	before 1:10.0.25-4.el7	1:10.0.25-4.el7
`mysql55-mysql` Red Hat:rhel_software_collections:2::el6 From an advisory covering 40 CVEs	before 0:5.5.50-1.el6	0:5.5.50-1.el6
`mysql55-mysql-bench` Red Hat:rhel_software_collections:2::el6 From an advisory covering 40 CVEs	before 0:5.5.50-1.el6	0:5.5.50-1.el6
`mysql55-mysql-debuginfo` Red Hat:rhel_software_collections:2::el6 From an advisory covering 40 CVEs	before 0:5.5.50-1.el6	0:5.5.50-1.el6
`mysql55-mysql-devel` Red Hat:rhel_software_collections:2::el6 From an advisory covering 40 CVEs	before 0:5.5.50-1.el6	0:5.5.50-1.el6
`mysql55-mysql-libs` Red Hat:rhel_software_collections:2::el6 From an advisory covering 40 CVEs	before 0:5.5.50-1.el6	0:5.5.50-1.el6
`mysql55-mysql-server` Red Hat:rhel_software_collections:2::el6 From an advisory covering 40 CVEs	before 0:5.5.50-1.el6	0:5.5.50-1.el6
`mysql55-mysql-test` Red Hat:rhel_software_collections:2::el6 From an advisory covering 40 CVEs	before 0:5.5.50-1.el6	0:5.5.50-1.el6
`mysql55-mysql` Red Hat:rhel_software_collections:2::el7 From an advisory covering 40 CVEs	before 0:5.5.50-1.el7	0:5.5.50-1.el7
`mysql55-mysql-bench` Red Hat:rhel_software_collections:2::el7 From an advisory covering 40 CVEs	before 0:5.5.50-1.el7	0:5.5.50-1.el7
`mysql55-mysql-debuginfo` Red Hat:rhel_software_collections:2::el7 From an advisory covering 40 CVEs	before 0:5.5.50-1.el7	0:5.5.50-1.el7
`mysql55-mysql-devel` Red Hat:rhel_software_collections:2::el7 From an advisory covering 40 CVEs	before 0:5.5.50-1.el7	0:5.5.50-1.el7
`mysql55-mysql-libs` Red Hat:rhel_software_collections:2::el7 From an advisory covering 40 CVEs	before 0:5.5.50-1.el7	0:5.5.50-1.el7
`mysql55-mysql-server` Red Hat:rhel_software_collections:2::el7 From an advisory covering 40 CVEs	before 0:5.5.50-1.el7	0:5.5.50-1.el7
`mysql55-mysql-test` Red Hat:rhel_software_collections:2::el7 From an advisory covering 40 CVEs	before 0:5.5.50-1.el7	0:5.5.50-1.el7
`mariadb55-mariadb` Red Hat:rhel_software_collections:2::el6 From an advisory covering 39 CVEs	before 0:5.5.49-1.el6	0:5.5.49-1.el6
`mariadb55-mariadb-bench` Red Hat:rhel_software_collections:2::el6 From an advisory covering 39 CVEs	before 0:5.5.49-1.el6	0:5.5.49-1.el6
`mariadb55-mariadb-debuginfo` Red Hat:rhel_software_collections:2::el6 From an advisory covering 39 CVEs	before 0:5.5.49-1.el6	0:5.5.49-1.el6
`mariadb55-mariadb-devel` Red Hat:rhel_software_collections:2::el6 From an advisory covering 39 CVEs	before 0:5.5.49-1.el6	0:5.5.49-1.el6
`mariadb55-mariadb-libs` Red Hat:rhel_software_collections:2::el6 From an advisory covering 39 CVEs	before 0:5.5.49-1.el6	0:5.5.49-1.el6
`mariadb55-mariadb-server` Red Hat:rhel_software_collections:2::el6 From an advisory covering 39 CVEs	before 0:5.5.49-1.el6	0:5.5.49-1.el6
`mariadb55-mariadb-test` Red Hat:rhel_software_collections:2::el6 From an advisory covering 39 CVEs	before 0:5.5.49-1.el6	0:5.5.49-1.el6
`mariadb55-mariadb` Red Hat:rhel_software_collections:2::el7 From an advisory covering 39 CVEs	before 0:5.5.49-1.el7	0:5.5.49-1.el7
`mariadb55-mariadb-bench` Red Hat:rhel_software_collections:2::el7 From an advisory covering 39 CVEs	before 0:5.5.49-1.el7	0:5.5.49-1.el7
`mariadb55-mariadb-debuginfo` Red Hat:rhel_software_collections:2::el7 From an advisory covering 39 CVEs	before 0:5.5.49-1.el7	0:5.5.49-1.el7
`mariadb55-mariadb-devel` Red Hat:rhel_software_collections:2::el7 From an advisory covering 39 CVEs	before 0:5.5.49-1.el7	0:5.5.49-1.el7
`mariadb55-mariadb-libs` Red Hat:rhel_software_collections:2::el7 From an advisory covering 39 CVEs	before 0:5.5.49-1.el7	0:5.5.49-1.el7
`mariadb55-mariadb-server` Red Hat:rhel_software_collections:2::el7 From an advisory covering 39 CVEs	before 0:5.5.49-1.el7	0:5.5.49-1.el7
`mariadb55-mariadb-test` Red Hat:rhel_software_collections:2::el7 From an advisory covering 39 CVEs	before 0:5.5.49-1.el7	0:5.5.49-1.el7
`mariadb` Red Hat:enterprise_linux:7::client From an advisory covering 16 CVEs	before 1:5.5.50-1.el7_2	1:5.5.50-1.el7_2
`mariadb-debuginfo` Red Hat:enterprise_linux:7::client From an advisory covering 16 CVEs	before 1:5.5.50-1.el7_2	1:5.5.50-1.el7_2
`mariadb-libs` Red Hat:enterprise_linux:7::client From an advisory covering 16 CVEs	before 1:5.5.50-1.el7_2	1:5.5.50-1.el7_2
`mariadb-server` Red Hat:enterprise_linux:7::client From an advisory covering 16 CVEs	before 1:5.5.50-1.el7_2	1:5.5.50-1.el7_2
`mariadb-bench` Red Hat:enterprise_linux:7::client From an advisory covering 16 CVEs	before 1:5.5.50-1.el7_2	1:5.5.50-1.el7_2
`mariadb-devel` Red Hat:enterprise_linux:7::client From an advisory covering 16 CVEs	before 1:5.5.50-1.el7_2	1:5.5.50-1.el7_2
`mariadb-embedded` Red Hat:enterprise_linux:7::client From an advisory covering 16 CVEs	before 1:5.5.50-1.el7_2	1:5.5.50-1.el7_2
`mariadb-embedded-devel` Red Hat:enterprise_linux:7::client From an advisory covering 16 CVEs	before 1:5.5.50-1.el7_2	1:5.5.50-1.el7_2
`mariadb-test` Red Hat:enterprise_linux:7::client From an advisory covering 16 CVEs	before 1:5.5.50-1.el7_2	1:5.5.50-1.el7_2
`mariadb` Red Hat:enterprise_linux:7::computenode From an advisory covering 16 CVEs	before 1:5.5.50-1.el7_2	1:5.5.50-1.el7_2
`mariadb-debuginfo` Red Hat:enterprise_linux:7::computenode From an advisory covering 16 CVEs	before 1:5.5.50-1.el7_2	1:5.5.50-1.el7_2
`mariadb-libs` Red Hat:enterprise_linux:7::computenode From an advisory covering 16 CVEs	before 1:5.5.50-1.el7_2	1:5.5.50-1.el7_2
`mariadb-bench` Red Hat:enterprise_linux:7::computenode From an advisory covering 16 CVEs	before 1:5.5.50-1.el7_2	1:5.5.50-1.el7_2
`mariadb-devel` Red Hat:enterprise_linux:7::computenode From an advisory covering 16 CVEs	before 1:5.5.50-1.el7_2	1:5.5.50-1.el7_2
`mariadb-embedded` Red Hat:enterprise_linux:7::computenode From an advisory covering 16 CVEs	before 1:5.5.50-1.el7_2	1:5.5.50-1.el7_2
`mariadb-embedded-devel` Red Hat:enterprise_linux:7::computenode From an advisory covering 16 CVEs	before 1:5.5.50-1.el7_2	1:5.5.50-1.el7_2
`mariadb-server` Red Hat:enterprise_linux:7::computenode From an advisory covering 16 CVEs	before 1:5.5.50-1.el7_2	1:5.5.50-1.el7_2
`mariadb-test` Red Hat:enterprise_linux:7::computenode From an advisory covering 16 CVEs	before 1:5.5.50-1.el7_2	1:5.5.50-1.el7_2
`mariadb` Red Hat:enterprise_linux:7::server From an advisory covering 16 CVEs	before 1:5.5.50-1.el7_2	1:5.5.50-1.el7_2
`mariadb-bench` Red Hat:enterprise_linux:7::server From an advisory covering 16 CVEs	before 1:5.5.50-1.el7_2	1:5.5.50-1.el7_2
`mariadb-debuginfo` Red Hat:enterprise_linux:7::server From an advisory covering 16 CVEs	before 1:5.5.50-1.el7_2	1:5.5.50-1.el7_2
`mariadb-devel` Red Hat:enterprise_linux:7::server From an advisory covering 16 CVEs	before 1:5.5.50-1.el7_2	1:5.5.50-1.el7_2
`mariadb-libs` Red Hat:enterprise_linux:7::server From an advisory covering 16 CVEs	before 1:5.5.50-1.el7_2	1:5.5.50-1.el7_2
`mariadb-server` Red Hat:enterprise_linux:7::server From an advisory covering 16 CVEs	before 1:5.5.50-1.el7_2	1:5.5.50-1.el7_2
`mariadb-test` Red Hat:enterprise_linux:7::server From an advisory covering 16 CVEs	before 1:5.5.50-1.el7_2	1:5.5.50-1.el7_2
`mariadb-embedded` Red Hat:enterprise_linux:7::server From an advisory covering 16 CVEs	before 1:5.5.50-1.el7_2	1:5.5.50-1.el7_2
`mariadb-embedded-devel` Red Hat:enterprise_linux:7::server From an advisory covering 16 CVEs	before 1:5.5.50-1.el7_2	1:5.5.50-1.el7_2
`mariadb` Red Hat:enterprise_linux:7::workstation From an advisory covering 16 CVEs	before 1:5.5.50-1.el7_2	1:5.5.50-1.el7_2
`mariadb-bench` Red Hat:enterprise_linux:7::workstation From an advisory covering 16 CVEs	before 1:5.5.50-1.el7_2	1:5.5.50-1.el7_2
`mariadb-debuginfo` Red Hat:enterprise_linux:7::workstation From an advisory covering 16 CVEs	before 1:5.5.50-1.el7_2	1:5.5.50-1.el7_2
`mariadb-devel` Red Hat:enterprise_linux:7::workstation From an advisory covering 16 CVEs	before 1:5.5.50-1.el7_2	1:5.5.50-1.el7_2
`mariadb-libs` Red Hat:enterprise_linux:7::workstation From an advisory covering 16 CVEs	before 1:5.5.50-1.el7_2	1:5.5.50-1.el7_2
`mariadb-server` Red Hat:enterprise_linux:7::workstation From an advisory covering 16 CVEs	before 1:5.5.50-1.el7_2	1:5.5.50-1.el7_2
`mariadb-test` Red Hat:enterprise_linux:7::workstation From an advisory covering 16 CVEs	before 1:5.5.50-1.el7_2	1:5.5.50-1.el7_2
`mariadb-embedded` Red Hat:enterprise_linux:7::workstation From an advisory covering 16 CVEs	before 1:5.5.50-1.el7_2	1:5.5.50-1.el7_2
`mariadb-embedded-devel` Red Hat:enterprise_linux:7::workstation From an advisory covering 16 CVEs	before 1:5.5.50-1.el7_2	1:5.5.50-1.el7_2
`mysql` SUSE:Linux Enterprise Software Development Kit 11 SP4 From an advisory covering 13 CVEs	before 5.5.49-0.20.1	5.5.49-0.20.1
`mysql` SUSE:Linux Enterprise Server 11 SP4 From an advisory covering 13 CVEs	before 5.5.49-0.20.1	5.5.49-0.20.1
`mysql` SUSE:Linux Enterprise Server for SAP Applications 11 SP4 From an advisory covering 13 CVEs	before 5.5.49-0.20.1	5.5.49-0.20.1
`mariadb` SUSE:Linux Enterprise Desktop 12 From an advisory covering 25 CVEs	before 10.0.25-20.6.1	10.0.25-20.6.1
`mariadb` SUSE:Linux Enterprise Software Development Kit 12 From an advisory covering 25 CVEs	before 10.0.25-20.6.1	10.0.25-20.6.1
`mariadb` SUSE:Linux Enterprise Server 12 From an advisory covering 25 CVEs	before 10.0.25-20.6.1	10.0.25-20.6.1
`mariadb` SUSE:Linux Enterprise Server for SAP Applications 12 From an advisory covering 25 CVEs	before 10.0.25-20.6.1	10.0.25-20.6.1
`mariadb` SUSE:Linux Enterprise Workstation Extension 12 From an advisory covering 25 CVEs	before 10.0.25-20.6.1	10.0.25-20.6.1
`mariadb` SUSE:Linux Enterprise Desktop 12 SP1 From an advisory covering 25 CVEs	before 10.0.25-6.1	10.0.25-6.1
`mariadb` SUSE:Linux Enterprise Software Development Kit 12 SP1 From an advisory covering 25 CVEs	before 10.0.25-6.1	10.0.25-6.1
`mariadb` SUSE:Linux Enterprise Server 12 SP1 From an advisory covering 25 CVEs	before 10.0.25-6.1	10.0.25-6.1
`mariadb` SUSE:Linux Enterprise Server for SAP Applications 12 SP1 From an advisory covering 25 CVEs	before 10.0.25-6.1	10.0.25-6.1
`mariadb` SUSE:Linux Enterprise Workstation Extension 12 SP1 From an advisory covering 25 CVEs	before 10.0.25-6.1	10.0.25-6.1
`mariadb-5.5` Ubuntu:14.04:LTS	before 5.5.49-1ubuntu0.14.04.1, plus listed versions 5.5.32-1ubuntu15.5.35-1ubuntu15.5.36-15.5.37-0ubuntu0.14.04.15.5.39-0ubuntu0.14.04.1 Show 7 moreShow less 5.5.40-0ubuntu0.14.04.15.5.41-0ubuntu0.14.04.25.5.41-1ubuntu0.14.04.15.5.43-1ubuntu0.14.04.25.5.44-1ubuntu0.14.04.15.5.46-1ubuntu0.14.04.25.5.47-1ubuntu0.14.04.1	5.5.49-1ubuntu0.14.04.1
`mysql-5.5` Ubuntu:14.04:LTS	before 5.5.49-0ubuntu0.14.04.1, plus listed versions 5.5.32-0ubuntu75.5.34-0ubuntu15.5.34-0ubuntu25.5.35-0ubuntu15.5.35+dfsg-1ubuntu1 Show 8 moreShow less 5.5.37-0ubuntu0.14.04.15.5.38-0ubuntu0.14.04.15.5.40-0ubuntu0.14.04.15.5.41-0ubuntu0.14.04.15.5.43-0ubuntu0.14.04.15.5.44-0ubuntu0.14.04.15.5.46-0ubuntu0.14.04.25.5.47-0ubuntu0.14.04.1	5.5.49-0ubuntu0.14.04.1
`mysql-5.6` Ubuntu:14.04:LTS	before 5.6.30-0ubuntu0.14.04.1, plus listed versions 5.6.15-0ubuntu15.6.15-1~exp25.6.16-1~exp15.6.17-0ubuntu0.14.04.15.6.19-0ubuntu0.14.04.15.6.27-0ubuntu0.14.04.15.6.28-0ubuntu0.14.04.1	5.6.30-0ubuntu0.14.04.1
`mariadb-10.0` Ubuntu:16.04:LTS	before 10.0.25-0ubuntu0.16.04.1, plus listed versions 10.0.20-0ubuntu0.15.04.110.0.22-0ubuntu110.0.23-110.0.23-210.0.24-7	10.0.25-0ubuntu0.16.04.1
`mysql-5.7` Ubuntu:16.04:LTS	before 5.7.12-0ubuntu1, plus listed versions 5.7.11-0ubuntu45.7.11-0ubuntu55.7.11-0ubuntu6	5.7.12-0ubuntu1
`percona-xtradb-cluster-5.6` Ubuntu:16.04:LTS	before 5.6.34-26.19-0ubuntu0.16.04.1, plus listed versions 5.6.21-25.8-0ubuntu25.6.21-25.8-0ubuntu35.6.21-25.8-0ubuntu3.15.6.21-25.8-0ubuntu3.2	5.6.34-26.19-0ubuntu0.16.04.1
`percona-server-5.6` Ubuntu:16.04:LTS	All versions, plus listed versions 5.6.22-rel71.0-0ubuntu25.6.22-rel71.0-0ubuntu45.6.22-rel71.0-0ubuntu4.1	None known
`mysql-5.5` Ubuntu:14.04:LTS From an advisory covering 17 CVEs	before 5.5.49-0ubuntu0.14.04.1, plus listed versions 5.5.32-0ubuntu75.5.34-0ubuntu15.5.34-0ubuntu25.5.35-0ubuntu15.5.35+dfsg-1ubuntu1 Show 8 moreShow less 5.5.37-0ubuntu0.14.04.15.5.38-0ubuntu0.14.04.15.5.40-0ubuntu0.14.04.15.5.41-0ubuntu0.14.04.15.5.43-0ubuntu0.14.04.15.5.44-0ubuntu0.14.04.15.5.46-0ubuntu0.14.04.25.5.47-0ubuntu0.14.04.1	5.5.49-0ubuntu0.14.04.1
`mysql-5.7` Ubuntu:16.04:LTS From an advisory covering 12 CVEs	before 5.7.12-0ubuntu1, plus listed versions 5.7.11-0ubuntu45.7.11-0ubuntu55.7.11-0ubuntu6	5.7.12-0ubuntu1

History

History
Recorded	Changed	Sources
Nov 6, 2026	affected, facts
Nov 3, 2026	aliases	EUVD
Nov 2, 2026	first indexed	CVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2016-0666 is a medium vulnerability (CVSS 5.5) in Mariadb, published April 20, 2016. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.78%, the 78th percentile. Fixed in mariadb 5.5.51-r0.

References

Show 194 moreShow less

This page doesn't list everything

Left out here: 317 references and the rest of 2 source descriptions. The JSON record has them.