Every CVE Search/ Get API key

CVE-2016-6664

mysqld_safe in Oracle MySQL through 5.5.51, 5.6.x through 5.6.32, and 5.7.x through 5.7.14;...

7.0 HighPublic exploitFix available

mysqld_safe in Oracle MySQL through 5.5.51, 5.6.x through 5.6.32, and 5.7.x through 5.7.14; MariaDB; Percona Server before 5.5.51-38.2, 5.6.x before 5.6.32-78-1, and 5.7.x before 5.7.14-8; and Percona XtraDB Cluster before 5.5.41-37.0, 5.6.x before 5.6.32-25.17, and 5.7.x before 5.7.14-26.17, when using file-based logging, allows local users with access to the mysql account to gain root privileges via a symlink attack on error logs and possibly other files.

Attack profile

How easy it is to exploit

Attack vector
Local
Complexity
High
Privileges needed
Low
User interaction
None

What an attacker can affect

Confidentiality
High
Integrity
High
Availability
High

Exploit likelihood

2.97%Up 1.4 points since Feb 4, 2022
90%50%10%1%

What each source reports

NVD Score used 7.0

mysqld_safe in Oracle MySQL through 5.5.51, 5.6.x through 5.6.32, and 5.7.x through 5.7.14; MariaDB; Percona Server before 5.5.51-38.2, 5.6.x before 5.6.32-78-1, and 5.7.x before 5.7.14-8; and Percona XtraDB Cluster before 5.5.41-37.0, 5.6.x before 5.6.32-25.17, and 5.7.x before 5.7.14-26.17, when using file-based logging, allows local users with access to the mysql account to gain root privileges via a symlink attack on error logs and possibly other files.

Record
CVE-2016-6664
CVSS 3.1
7.0 HighCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS 2.0
6.9 MediumAV:L/AC:M/Au:N/C:C/I:C/A:C
Weakness
CWE-59
Updated
2026-11-02
CVE List No score

mysqld_safe in Oracle MySQL through 5.5.51, 5.6.x through 5.6.32, and 5.7.x through 5.7.14; MariaDB; Percona Server before 5.5.51-38.2, 5.6.x before 5.6.32-78-1, and 5.7.x before 5.7.14-8; and Percona XtraDB Cluster before 5.5.41-37.0, 5.6.x before 5.6.32-25.17, and 5.7.x before 5.7.14-26.17, when using file-based logging, allows local users with access to the mysql account to gain root privileges via a symlink attack on error logs and possibly other files.

Record
CVE-2016-6664
Updated
2026-11-02
EUVDEUVD-2016-7567 No score

mysqld_safe in Oracle MySQL through 5.5.51, 5.6.x through 5.6.32, and 5.7.x through 5.7.14; MariaDB; Percona Server before 5.5.51-38.2, 5.6.x before 5.6.32-78-1, and 5.7.x before 5.7.14-8; and Percona XtraDB Cluster before 5.5.41-37.0, 5.6.x before 5.6.32-25.17, and 5.7.x before 5.7.14-26.17, when using file-based logging, allows local users with access to the mysql account to gain root privileges via a symlink attack on error logs and possibly other files.

Record
EUVD-2016-7567
Updated
2026-11-03
GitHub AdvisoriesGHSA-f9x4-3x96-w2vf 7.0

mysqld_safe in Oracle MySQL through 5.5.51, 5.6.x through 5.6.32, and 5.7.x through 5.7.14;...

mysqld_safe in Oracle MySQL through 5.5.51, 5.6.x through 5.6.32, and 5.7.x through 5.7.14; MariaDB; Percona Server before 5.5.51-38.2, 5.6.x before 5.6.32-78-1, and 5.7.x before 5.7.14-8; and Percona XtraDB Cluster before 5.5.41-37.0, 5.6.x before 5.6.32-25.17, and 5.7.x before 5.7.14-26.17, when using file-based logging, allows local users with access to the mysql account to gain root privileges via a symlink attack on error logs and possibly other files.

Record
GHSA-f9x4-3x96-w2vf
CVSS 3.1
7.0 HighCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
Weakness
CWE-59
Updated
2026-11-02
OSVALPINE-CVE-2016-6664 7.0

mysqld_safe in Oracle MySQL through 5.5.51, 5.6.x through 5.6.32, and 5.7.x through 5.7.14; MariaDB; Percona Server before 5.5.51-38.2, 5.6.x before 5.6.32-78-1, and 5.7.x before 5.7.14-8; and Percona XtraDB Cluster before 5.5.41-37.0, 5.6.x before 5.6.32-25.17, and 5.7.x before 5.7.14-26.17, when using file-based logging, allows local users with access to the mysql account to gain root privileges via a symlink attack on error logs and possibly other files.

Record
ALPINE-CVE-2016-6664
CVSS 3.1
7.0 HighCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVBELL-CVE-2016-6664 7.0

CVE-2016-6664 does not affect BellSoft software

Record
BELL-CVE-2016-6664
CVSS 3.1
7.0 HighCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
Show 13 moreShow less
OSV 7.0

mysqld_safe in Oracle MySQL through 5.5.51, 5.6.x through 5.6.32, and 5.7.x through 5.7.14; MariaDB; Percona Server before 5.5.51-38.2, 5.6.x before 5.6.32-78-1, and 5.7.x before 5.7.14-8; and Percona XtraDB Cluster before 5.5.41-37.0, 5.6.x before 5.6.32-25.17, and 5.7.x before 5.7.14-26.17, when using file-based logging, allows local users with access to the mysql account to gain root privileges via a symlink attack on error logs and possibly other files.

Record
CVE-2016-6664
CVSS 3.1
7.0 HighCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2016:2130 9.8

Red Hat Security Advisory: mysql55-mysql security update

Record
RHSA-2016:2130
CVSS 3.0
9.8 CriticalCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2016:2749 9.8

Red Hat Security Advisory: rh-mysql56-mysql security update

Record
RHSA-2016:2749
CVSS 3.0
9.8 CriticalCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2017:2192 7.8

Red Hat Security Advisory: mariadb security and bug fix update

Record
RHSA-2017:2192
CVSS 3.0
7.8 HighCVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2018:0279 7.8

Red Hat Security Advisory: rh-mariadb100-mariadb security update

Record
RHSA-2018:0279
CVSS 3.0
7.8 HighCVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2018:0574 7.8

Red Hat Security Advisory: rh-mariadb101-mariadb and rh-mariadb101-galera security and bug fix update

Record
RHSA-2018:0574
CVSS 3.0
7.8 HighCVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVUBUNTU-CVE-2016-6664 7.0

mysqld_safe in Oracle MySQL through 5.5.51, 5.6.x through 5.6.32, and 5.7.x through 5.7.14; MariaDB; Percona Server before 5.5.51-38.2, 5.6.x before 5.6.32-78-1, and 5.7.x before 5.7.14-8; and Percona XtraDB Cluster before 5.5.41-37.0, 5.6.x before 5.6.32-25.17, and 5.7.x before 5.7.14-26.17, when using file-based logging, allows local users with access to the mysql account to gain root privileges via a symlink attack on error logs and possibly other files.

Record
UBUNTU-CVE-2016-6664
CVSS 3.1
7.0 HighCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS 3.0
7.0 HighCVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVMGASA-2017-0054 No score

Updated mariadb packages fix security vulnerability

Root Privilege Escalation (CVE-2016-6664).

Unspecified vulnerability affecting the Optimizer component (CVE-2017-3238).

Unspecified vulnerability affecting the Charsets component (CVE-2017-3243).

Unspecified vulnerability affecing the DML component (CVE-2017-3244).

Unspecified vulnerability affecting InnoDB (CVE-2017-3257).

Unspecified vulnerability in the DDL component (CVE-2017-3258).

Unsafe chmod/chown use in init script (CVE-2017-3265).

Unrestricted mysqld_safe's ledir (CVE-2017-3291).

Insecure error log file handling in mysqld_safe, due to an incomplete fix for CVE-2016-6664 (CVE-2017-3312).

Unspecified vulnerability affecting Logging (CVE-2017-3317).

Unspecified vulnerability affecting Error Handling (CVE-2017-3318).

Applications using the client library for MySQL (libmysqlclient.so) had a use-after-free issue that could cause the applications to crash (bsc#1022428).

Record
MGASA-2017-0054
Updated
2026-11-02
OSVopenSUSE-SU-2024:11038-1 No score

libmariadbd-devel-10.6.4-2.1 on GA media

These are all security issues fixed in the libmariadbd-devel-10.6.4-2.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2024:11038-1
Updated
2026-11-02
OSVSUSE-RU-2023:3956-1 No score

Recommended update for mariadb104

This update for mariadb104 fixes the following issues:

  • Implement version 10.4 of MariaDB (jsc#PED-2455):
    • It is possible to use more than one authentication plugin for each user account.
    • The root user account is being created with the ability to use two authentication plugins.
    • All user accounts, passwords, and global privileges are now stored in the mysql.global_priv table.
    • Is being supported for User Password Expiry, which is not active by default.
    • Faster privilege checks for MariaDB setups with many user accounts or many database grants.
  • Update mysql-systemd-helper to be aware of custom group (bsc#1200105)
  • MariaDB is now support lz4 compression for 'INNODB'. (bsc#1186031)
  • Add 'mysql-user.conf' file to enable systemd generating mysql user in containers. (bsc#1173028)
  • Fixes an issue when MariaDB is ignoring the value of the parameter 'open_files_limit' in the global variables. (bsc#1180014)
Record
SUSE-RU-2023:3956-1
Updated
2026-11-02
OSVSUSE-RU-2023:4991-1 No score

Recommended update for mariadb104

This update for mariadb104 fixes the following issues:

  • Implement version 10.4 of MariaDB (jsc#PED-2455):
    • It is possible to use more than one authentication plugin for each user account.
    • The root user account is being created with the ability to use two authentication plugins.
    • All user accounts, passwords, and global privileges are now stored in the mysql.global_priv table.
    • Is being supported for User Password Expiry, which is not active by default.
    • Faster privilege checks for MariaDB setups with many user accounts or many database grants.
  • Update mysql-systemd-helper to be aware of custom group (bsc#1200105)
  • MariaDB is now support lz4 compression for 'INNODB'. (bsc#1186031)
  • Add 'mysql-user.conf' file to enable systemd generating mysql user in containers. (bsc#1173028)
  • Fixes an issue when MariaDB is ignoring the value of the parameter 'open_files_limit' in the global variables. (bsc#1180014)
Record
SUSE-RU-2023:4991-1
Updated
2026-11-02
OSVSUSE-SU-2017:0411-1 No score

Security update for mariadb

This mariadb version update to 10.0.29 fixes the following issues:

  • CVE-2017-3318: unspecified vulnerability affecting Error Handling (bsc#1020896)

  • CVE-2017-3317: unspecified vulnerability affecting Logging (bsc#1020894)

  • CVE-2017-3312: insecure error log file handling in mysqld_safe, incomplete CVE-2016-6664 (bsc#1020873)

  • CVE-2017-3291: unrestricted mysqld_safe's ledir (bsc#1020884)

  • CVE-2017-3265: unsafe chmod/chown use in init script (bsc#1020885)

  • CVE-2017-3258: unspecified vulnerability in the DDL component (bsc#1020875)

  • CVE-2017-3257: unspecified vulnerability affecting InnoDB (bsc#1020878)

  • CVE-2017-3244: unspecified vulnerability affecing the DML component (bsc#1020877)

  • CVE-2017-3243: unspecified vulnerability affecting the Charsets component (bsc#1020891)

  • CVE-2017-3238: unspecified vulnerability affecting the Optimizer component (bsc#1020882)

  • CVE-2016-6664: Root Privilege Escalation (bsc#1008253)

  • Applications using the client library for MySQL (libmysqlclient.so) had a use-after-free issue that could cause the applications to crash (bsc#1022428)

  • notable changes:

    • XtraDB updated to 5.6.34-79.1
    • TokuDB updated to 5.6.34-79.1
    • Innodb updated to 5.6.35
    • Performance Schema updated to 5.6.35

Release notes and changelog:

Record
SUSE-SU-2017:0411-1
Updated
2026-11-02
OSVSUSE-SU-2017:0412-1 No score

Security update for mariadb

This mariadb version update to 10.0.29 fixes the following issues:

  • CVE-2017-3318: unspecified vulnerability affecting Error Handling (bsc#1020896)

  • CVE-2017-3317: unspecified vulnerability affecting Logging (bsc#1020894)

  • CVE-2017-3312: insecure error log file handling in mysqld_safe, incomplete CVE-2016-6664 (bsc#1020873)

  • CVE-2017-3291: unrestricted mysqld_safe's ledir (bsc#1020884)

  • CVE-2017-3265: unsafe chmod/chown use in init script (bsc#1020885)

  • CVE-2017-3258: unspecified vulnerability in the DDL component (bsc#1020875)

  • CVE-2017-3257: unspecified vulnerability affecting InnoDB (bsc#1020878)

  • CVE-2017-3244: unspecified vulnerability affecing the DML component (bsc#1020877)

  • CVE-2017-3243: unspecified vulnerability affecting the Charsets component (bsc#1020891)

  • CVE-2017-3238: unspecified vulnerability affecting the Optimizer component (bsc#1020882)

  • CVE-2016-6664: Root Privilege Escalation (bsc#1008253)

  • Applications using the client library for MySQL (libmysqlclient.so) had a use-after-free issue that could cause the applications to crash (bsc#1022428)

  • notable changes:

    • XtraDB updated to 5.6.34-79.1
    • TokuDB updated to 5.6.34-79.1
    • Innodb updated to 5.6.35
    • Performance Schema updated to 5.6.35

Release notes and changelog:

Record
SUSE-SU-2017:0412-1
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
mariadb
Alpine:v3.10
 5.5.0 up to 10.1.21-r0
10.1.21-r0
mariadb
Alpine:v3.11
 5.5.0 up to 10.1.21-r0
10.1.21-r0
mariadb
Alpine:v3.12
 5.5.0 up to 10.1.21-r0
10.1.21-r0
mariadb
Alpine:v3.13
 5.5.0 up to 10.1.21-r0
10.1.21-r0
mariadb
Alpine:v3.14
 5.5.0 up to 10.1.21-r0
10.1.21-r0
mariadb
Alpine:v3.15
 5.5.0 up to 10.1.21-r0
10.1.21-r0
mariadb
Alpine:v3.16
 5.5.0 up to 10.1.21-r0
10.1.21-r0
mariadb
Alpine:v3.17
 5.5.0 up to 10.1.21-r0
10.1.21-r0
mariadb
Alpine:v3.18
 5.5.0 up to 10.1.21-r0
10.1.21-r0
mariadb
Alpine:v3.19
 5.5.0 up to 10.1.21-r0
10.1.21-r0
Show 162 moreShow less
Affected packages
PackageAffectedFixed
mariadb
Alpine:v3.20
 5.5.0 up to 10.1.21-r0
10.1.21-r0
mariadb
Alpine:v3.21
 5.5.0 up to 10.1.21-r0
10.1.21-r0
mariadb
Alpine:v3.22
 5.5.0 up to 10.1.21-r0
10.1.21-r0
mariadb
Alpine:v3.23
 5.5.0 up to 10.1.21-r0
10.1.21-r0
mariadb
Alpine:v3.24
 5.5.0 up to 10.1.21-r0
10.1.21-r0
mariadb
Alpine:v3.3
 5.5.0 up to 10.1.21-r0
10.1.21-r0
mariadb
Alpine:v3.4
 5.5.0 up to 10.1.21-r0
10.1.21-r0
mariadb
Alpine:v3.5
 5.5.0 up to 10.1.21-r0
10.1.21-r0
mariadb
Alpine:v3.6
 5.5.0 up to 10.1.21-r0
10.1.21-r0
mariadb
Alpine:v3.7
 5.5.0 up to 10.1.21-r0
10.1.21-r0
mariadb
Alpine:v3.8
 5.5.0 up to 10.1.21-r0
10.1.21-r0
mariadb
Alpine:v3.9
 5.5.0 up to 10.1.21-r0
10.1.21-r0
mariadb-10.0
Debian:8
 before 10.0.29-0+deb8u1, plus listed versions
10.0.16-110.0.17-110.0.17-1~exp110.0.17-1~exp210.0.18-1~exp1
Show 45 moreShow less
10.0.19-110.0.20-0+deb8u110.0.20-110.0.20-210.0.20-310.0.21-110.0.21-210.0.21-310.0.22-0+deb8u110.0.22-110.0.22-210.0.22-2~exp110.0.22-2~exp210.0.22-310.0.22-410.0.22-4~exp110.0.22-510.0.22-610.0.23-0+deb8u110.0.23-110.0.23-210.0.23-310.0.24-110.0.24-210.0.24-310.0.24-410.0.24-4~exp110.0.24-510.0.24-610.0.24-710.0.25-0+deb8u110.0.25-110.0.26-0+deb8u110.0.26-110.0.26-210.0.26-2~exp210.0.26-2~exp310.0.26-310.0.27-0+deb8u110.0.27-110.0.27-210.0.28-0+deb8u110.0.28-110.0.28-210.0.28-3
10.0.29-0+deb8u1
mariadb
Mageia:5
 before 10.0.29-1.3.mga5
10.0.29-1.3.mga5
mysql55-mysql
Red Hat:rhel_software_collections:2::el6
 before 0:5.5.52-1.el6
0:5.5.52-1.el6
mysql55-mysql-bench
Red Hat:rhel_software_collections:2::el6
 before 0:5.5.52-1.el6
0:5.5.52-1.el6
mysql55-mysql-debuginfo
Red Hat:rhel_software_collections:2::el6
 before 0:5.5.52-1.el6
0:5.5.52-1.el6
mysql55-mysql-devel
Red Hat:rhel_software_collections:2::el6
 before 0:5.5.52-1.el6
0:5.5.52-1.el6
mysql55-mysql-libs
Red Hat:rhel_software_collections:2::el6
 before 0:5.5.52-1.el6
0:5.5.52-1.el6
mysql55-mysql-server
Red Hat:rhel_software_collections:2::el6
 before 0:5.5.52-1.el6
0:5.5.52-1.el6
mysql55-mysql-test
Red Hat:rhel_software_collections:2::el6
 before 0:5.5.52-1.el6
0:5.5.52-1.el6
mysql55-mysql
Red Hat:rhel_software_collections:2::el7
 before 0:5.5.52-1.el7
0:5.5.52-1.el7
mysql55-mysql-bench
Red Hat:rhel_software_collections:2::el7
 before 0:5.5.52-1.el7
0:5.5.52-1.el7
mysql55-mysql-debuginfo
Red Hat:rhel_software_collections:2::el7
 before 0:5.5.52-1.el7
0:5.5.52-1.el7
mysql55-mysql-devel
Red Hat:rhel_software_collections:2::el7
 before 0:5.5.52-1.el7
0:5.5.52-1.el7
mysql55-mysql-libs
Red Hat:rhel_software_collections:2::el7
 before 0:5.5.52-1.el7
0:5.5.52-1.el7
mysql55-mysql-server
Red Hat:rhel_software_collections:2::el7
 before 0:5.5.52-1.el7
0:5.5.52-1.el7
mysql55-mysql-test
Red Hat:rhel_software_collections:2::el7
 before 0:5.5.52-1.el7
0:5.5.52-1.el7
rh-mysql56-mysql
Red Hat:rhel_software_collections:2::el6
 before 0:5.6.34-2.el6
0:5.6.34-2.el6
rh-mysql56-mysql-bench
Red Hat:rhel_software_collections:2::el6
 before 0:5.6.34-2.el6
0:5.6.34-2.el6
rh-mysql56-mysql-common
Red Hat:rhel_software_collections:2::el6
 before 0:5.6.34-2.el6
0:5.6.34-2.el6
rh-mysql56-mysql-config
Red Hat:rhel_software_collections:2::el6
 before 0:5.6.34-2.el6
0:5.6.34-2.el6
rh-mysql56-mysql-debuginfo
Red Hat:rhel_software_collections:2::el6
 before 0:5.6.34-2.el6
0:5.6.34-2.el6
rh-mysql56-mysql-devel
Red Hat:rhel_software_collections:2::el6
 before 0:5.6.34-2.el6
0:5.6.34-2.el6
rh-mysql56-mysql-errmsg
Red Hat:rhel_software_collections:2::el6
 before 0:5.6.34-2.el6
0:5.6.34-2.el6
rh-mysql56-mysql-server
Red Hat:rhel_software_collections:2::el6
 before 0:5.6.34-2.el6
0:5.6.34-2.el6
rh-mysql56-mysql-test
Red Hat:rhel_software_collections:2::el6
 before 0:5.6.34-2.el6
0:5.6.34-2.el6
rh-mysql56-mysql
Red Hat:rhel_software_collections:2::el7
 before 0:5.6.34-2.el7
0:5.6.34-2.el7
rh-mysql56-mysql-bench
Red Hat:rhel_software_collections:2::el7
 before 0:5.6.34-2.el7
0:5.6.34-2.el7
rh-mysql56-mysql-common
Red Hat:rhel_software_collections:2::el7
 before 0:5.6.34-2.el7
0:5.6.34-2.el7
rh-mysql56-mysql-config
Red Hat:rhel_software_collections:2::el7
 before 0:5.6.34-2.el7
0:5.6.34-2.el7
rh-mysql56-mysql-debuginfo
Red Hat:rhel_software_collections:2::el7
 before 0:5.6.34-2.el7
0:5.6.34-2.el7
rh-mysql56-mysql-devel
Red Hat:rhel_software_collections:2::el7
 before 0:5.6.34-2.el7
0:5.6.34-2.el7
rh-mysql56-mysql-errmsg
Red Hat:rhel_software_collections:2::el7
 before 0:5.6.34-2.el7
0:5.6.34-2.el7
rh-mysql56-mysql-server
Red Hat:rhel_software_collections:2::el7
 before 0:5.6.34-2.el7
0:5.6.34-2.el7
rh-mysql56-mysql-test
Red Hat:rhel_software_collections:2::el7
 before 0:5.6.34-2.el7
0:5.6.34-2.el7
mariadb-bench
Red Hat:enterprise_linux:7::client
 before 1:5.5.56-2.el7
1:5.5.56-2.el7
mariadb-debuginfo
Red Hat:enterprise_linux:7::client
 before 1:5.5.56-2.el7
1:5.5.56-2.el7
mariadb-devel
Red Hat:enterprise_linux:7::client
 before 1:5.5.56-2.el7
1:5.5.56-2.el7
mariadb-embedded
Red Hat:enterprise_linux:7::client
 before 1:5.5.56-2.el7
1:5.5.56-2.el7
mariadb-embedded-devel
Red Hat:enterprise_linux:7::client
 before 1:5.5.56-2.el7
1:5.5.56-2.el7
mariadb-test
Red Hat:enterprise_linux:7::client
 before 1:5.5.56-2.el7
1:5.5.56-2.el7
mariadb
Red Hat:enterprise_linux:7::client
 before 1:5.5.56-2.el7
1:5.5.56-2.el7
mariadb-libs
Red Hat:enterprise_linux:7::client
 before 1:5.5.56-2.el7
1:5.5.56-2.el7
mariadb-server
Red Hat:enterprise_linux:7::client
 before 1:5.5.56-2.el7
1:5.5.56-2.el7
mariadb-bench
Red Hat:enterprise_linux:7::computenode
 before 1:5.5.56-2.el7
1:5.5.56-2.el7
mariadb-debuginfo
Red Hat:enterprise_linux:7::computenode
 before 1:5.5.56-2.el7
1:5.5.56-2.el7
mariadb-devel
Red Hat:enterprise_linux:7::computenode
 before 1:5.5.56-2.el7
1:5.5.56-2.el7
mariadb-embedded
Red Hat:enterprise_linux:7::computenode
 before 1:5.5.56-2.el7
1:5.5.56-2.el7
mariadb-embedded-devel
Red Hat:enterprise_linux:7::computenode
 before 1:5.5.56-2.el7
1:5.5.56-2.el7
mariadb-server
Red Hat:enterprise_linux:7::computenode
 before 1:5.5.56-2.el7
1:5.5.56-2.el7
mariadb-test
Red Hat:enterprise_linux:7::computenode
 before 1:5.5.56-2.el7
1:5.5.56-2.el7
mariadb
Red Hat:enterprise_linux:7::computenode
 before 1:5.5.56-2.el7
1:5.5.56-2.el7
mariadb-libs
Red Hat:enterprise_linux:7::computenode
 before 1:5.5.56-2.el7
1:5.5.56-2.el7
mariadb-debuginfo
Red Hat:enterprise_linux:7::server
 before 1:5.5.56-2.el7
1:5.5.56-2.el7
mariadb-embedded
Red Hat:enterprise_linux:7::server
 before 1:5.5.56-2.el7
1:5.5.56-2.el7
mariadb-embedded-devel
Red Hat:enterprise_linux:7::server
 before 1:5.5.56-2.el7
1:5.5.56-2.el7
mariadb
Red Hat:enterprise_linux:7::server
 before 1:5.5.56-2.el7
1:5.5.56-2.el7
mariadb-bench
Red Hat:enterprise_linux:7::server
 before 1:5.5.56-2.el7
1:5.5.56-2.el7
mariadb-devel
Red Hat:enterprise_linux:7::server
 before 1:5.5.56-2.el7
1:5.5.56-2.el7
mariadb-libs
Red Hat:enterprise_linux:7::server
 before 1:5.5.56-2.el7
1:5.5.56-2.el7
mariadb-server
Red Hat:enterprise_linux:7::server
 before 1:5.5.56-2.el7
1:5.5.56-2.el7
mariadb-test
Red Hat:enterprise_linux:7::server
 before 1:5.5.56-2.el7
1:5.5.56-2.el7
mariadb-debuginfo
Red Hat:enterprise_linux:7::workstation
 before 1:5.5.56-2.el7
1:5.5.56-2.el7
mariadb-embedded
Red Hat:enterprise_linux:7::workstation
 before 1:5.5.56-2.el7
1:5.5.56-2.el7
mariadb-embedded-devel
Red Hat:enterprise_linux:7::workstation
 before 1:5.5.56-2.el7
1:5.5.56-2.el7
mariadb
Red Hat:enterprise_linux:7::workstation
 before 1:5.5.56-2.el7
1:5.5.56-2.el7
mariadb-bench
Red Hat:enterprise_linux:7::workstation
 before 1:5.5.56-2.el7
1:5.5.56-2.el7
mariadb-devel
Red Hat:enterprise_linux:7::workstation
 before 1:5.5.56-2.el7
1:5.5.56-2.el7
mariadb-libs
Red Hat:enterprise_linux:7::workstation
 before 1:5.5.56-2.el7
1:5.5.56-2.el7
mariadb-server
Red Hat:enterprise_linux:7::workstation
 before 1:5.5.56-2.el7
1:5.5.56-2.el7
mariadb-test
Red Hat:enterprise_linux:7::workstation
 before 1:5.5.56-2.el7
1:5.5.56-2.el7
rh-mariadb100-mariadb
Red Hat:rhel_software_collections:3::el6
 before 1:10.0.33-3.el6
1:10.0.33-3.el6
rh-mariadb100-mariadb-bench
Red Hat:rhel_software_collections:3::el6
 before 1:10.0.33-3.el6
1:10.0.33-3.el6
rh-mariadb100-mariadb-common
Red Hat:rhel_software_collections:3::el6
 before 1:10.0.33-3.el6
1:10.0.33-3.el6
rh-mariadb100-mariadb-config
Red Hat:rhel_software_collections:3::el6
 before 1:10.0.33-3.el6
1:10.0.33-3.el6
rh-mariadb100-mariadb-debuginfo
Red Hat:rhel_software_collections:3::el6
 before 1:10.0.33-3.el6
1:10.0.33-3.el6
rh-mariadb100-mariadb-devel
Red Hat:rhel_software_collections:3::el6
 before 1:10.0.33-3.el6
1:10.0.33-3.el6
rh-mariadb100-mariadb-errmsg
Red Hat:rhel_software_collections:3::el6
 before 1:10.0.33-3.el6
1:10.0.33-3.el6
rh-mariadb100-mariadb-oqgraph-engine
Red Hat:rhel_software_collections:3::el6
 before 1:10.0.33-3.el6
1:10.0.33-3.el6
rh-mariadb100-mariadb-server
Red Hat:rhel_software_collections:3::el6
 before 1:10.0.33-3.el6
1:10.0.33-3.el6
rh-mariadb100-mariadb-test
Red Hat:rhel_software_collections:3::el6
 before 1:10.0.33-3.el6
1:10.0.33-3.el6
rh-mariadb100-mariadb
Red Hat:rhel_software_collections:3::el7
 before 1:10.0.33-3.el7
1:10.0.33-3.el7
rh-mariadb100-mariadb-bench
Red Hat:rhel_software_collections:3::el7
 before 1:10.0.33-3.el7
1:10.0.33-3.el7
rh-mariadb100-mariadb-common
Red Hat:rhel_software_collections:3::el7
 before 1:10.0.33-3.el7
1:10.0.33-3.el7
rh-mariadb100-mariadb-config
Red Hat:rhel_software_collections:3::el7
 before 1:10.0.33-3.el7
1:10.0.33-3.el7
rh-mariadb100-mariadb-debuginfo
Red Hat:rhel_software_collections:3::el7
 before 1:10.0.33-3.el7
1:10.0.33-3.el7
rh-mariadb100-mariadb-devel
Red Hat:rhel_software_collections:3::el7
 before 1:10.0.33-3.el7
1:10.0.33-3.el7
rh-mariadb100-mariadb-errmsg
Red Hat:rhel_software_collections:3::el7
 before 1:10.0.33-3.el7
1:10.0.33-3.el7
rh-mariadb100-mariadb-oqgraph-engine
Red Hat:rhel_software_collections:3::el7
 before 1:10.0.33-3.el7
1:10.0.33-3.el7
rh-mariadb100-mariadb-server
Red Hat:rhel_software_collections:3::el7
 before 1:10.0.33-3.el7
1:10.0.33-3.el7
rh-mariadb100-mariadb-test
Red Hat:rhel_software_collections:3::el7
 before 1:10.0.33-3.el7
1:10.0.33-3.el7
rh-mariadb101-galera
Red Hat:rhel_software_collections:3::el6
 before 0:25.3.12-12.el6
0:25.3.12-12.el6
rh-mariadb101-galera-debuginfo
Red Hat:rhel_software_collections:3::el6
 before 0:25.3.12-12.el6
0:25.3.12-12.el6
rh-mariadb101-mariadb
Red Hat:rhel_software_collections:3::el6
 before 1:10.1.29-3.el6
1:10.1.29-3.el6
rh-mariadb101-mariadb-bench
Red Hat:rhel_software_collections:3::el6
 before 1:10.1.29-3.el6
1:10.1.29-3.el6
rh-mariadb101-mariadb-common
Red Hat:rhel_software_collections:3::el6
 before 1:10.1.29-3.el6
1:10.1.29-3.el6
rh-mariadb101-mariadb-config
Red Hat:rhel_software_collections:3::el6
 before 1:10.1.29-3.el6
1:10.1.29-3.el6
rh-mariadb101-mariadb-debuginfo
Red Hat:rhel_software_collections:3::el6
 before 1:10.1.29-3.el6
1:10.1.29-3.el6
rh-mariadb101-mariadb-devel
Red Hat:rhel_software_collections:3::el6
 before 1:10.1.29-3.el6
1:10.1.29-3.el6
rh-mariadb101-mariadb-errmsg
Red Hat:rhel_software_collections:3::el6
 before 1:10.1.29-3.el6
1:10.1.29-3.el6
rh-mariadb101-mariadb-oqgraph-engine
Red Hat:rhel_software_collections:3::el6
 before 1:10.1.29-3.el6
1:10.1.29-3.el6
rh-mariadb101-mariadb-server
Red Hat:rhel_software_collections:3::el6
 before 1:10.1.29-3.el6
1:10.1.29-3.el6
rh-mariadb101-mariadb-server-galera
Red Hat:rhel_software_collections:3::el6
 before 1:10.1.29-3.el6
1:10.1.29-3.el6
rh-mariadb101-mariadb-test
Red Hat:rhel_software_collections:3::el6
 before 1:10.1.29-3.el6
1:10.1.29-3.el6
rh-mariadb101-galera
Red Hat:rhel_software_collections:3::el7
 before 0:25.3.12-12.el7
0:25.3.12-12.el7
rh-mariadb101-galera-debuginfo
Red Hat:rhel_software_collections:3::el7
 before 0:25.3.12-12.el7
0:25.3.12-12.el7
rh-mariadb101-mariadb
Red Hat:rhel_software_collections:3::el7
 before 1:10.1.29-3.el7
1:10.1.29-3.el7
rh-mariadb101-mariadb-bench
Red Hat:rhel_software_collections:3::el7
 before 1:10.1.29-3.el7
1:10.1.29-3.el7
rh-mariadb101-mariadb-common
Red Hat:rhel_software_collections:3::el7
 before 1:10.1.29-3.el7
1:10.1.29-3.el7
rh-mariadb101-mariadb-config
Red Hat:rhel_software_collections:3::el7
 before 1:10.1.29-3.el7
1:10.1.29-3.el7
rh-mariadb101-mariadb-debuginfo
Red Hat:rhel_software_collections:3::el7
 before 1:10.1.29-3.el7
1:10.1.29-3.el7
rh-mariadb101-mariadb-devel
Red Hat:rhel_software_collections:3::el7
 before 1:10.1.29-3.el7
1:10.1.29-3.el7
rh-mariadb101-mariadb-errmsg
Red Hat:rhel_software_collections:3::el7
 before 1:10.1.29-3.el7
1:10.1.29-3.el7
rh-mariadb101-mariadb-oqgraph-engine
Red Hat:rhel_software_collections:3::el7
 before 1:10.1.29-3.el7
1:10.1.29-3.el7
rh-mariadb101-mariadb-server
Red Hat:rhel_software_collections:3::el7
 before 1:10.1.29-3.el7
1:10.1.29-3.el7
rh-mariadb101-mariadb-server-galera
Red Hat:rhel_software_collections:3::el7
 before 1:10.1.29-3.el7
1:10.1.29-3.el7
rh-mariadb101-mariadb-test
Red Hat:rhel_software_collections:3::el7
 before 1:10.1.29-3.el7
1:10.1.29-3.el7
mariadb104
SUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS
 before 10.4.30-150100.3.5.10
10.4.30-150100.3.5.10
python-mysqlclient
SUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS
 before 1.4.6-150100.3.3.7
1.4.6-150100.3.3.7
mariadb104
SUSE:Linux Enterprise Server 15 SP1-LTSS
 before 10.4.30-150100.3.5.10
10.4.30-150100.3.5.10
python-mysqlclient
SUSE:Linux Enterprise Server 15 SP1-LTSS
 before 1.4.6-150100.3.3.7
1.4.6-150100.3.3.7
mariadb104
SUSE:Linux Enterprise Server for SAP Applications 15 SP1
 before 10.4.30-150100.3.5.10
10.4.30-150100.3.5.10
python-mysqlclient
SUSE:Linux Enterprise Server for SAP Applications 15 SP1
 before 1.4.6-150100.3.3.7
1.4.6-150100.3.3.7
lz4
SUSE:Linux Enterprise Software Development Kit 12 SP5
 before 1.8.0-3.5.2
1.8.0-3.5.2
mariadb-connector-c
SUSE:Linux Enterprise Software Development Kit 12 SP5
 before 3.1.22-2.35.1
3.1.22-2.35.1
mariadb104
SUSE:Linux Enterprise Software Development Kit 12 SP5
 before 10.4.30-8.5.46
10.4.30-8.5.46
python-mysqlclient
SUSE:Linux Enterprise Software Development Kit 12 SP5
 before 1.3.14-8.9.2
1.3.14-8.9.2
lz4
SUSE:Linux Enterprise Server 12 SP5
 before 1.8.0-3.5.2
1.8.0-3.5.2
mariadb-connector-c
SUSE:Linux Enterprise Server 12 SP5
 before 3.1.22-2.35.1
3.1.22-2.35.1
mariadb104
SUSE:Linux Enterprise Server 12 SP5
 before 10.4.30-8.5.46
10.4.30-8.5.46
python-mysqlclient
SUSE:Linux Enterprise Server 12 SP5
 before 1.3.14-8.9.2
1.3.14-8.9.2
lz4
SUSE:Linux Enterprise Server for SAP Applications 12 SP5
 before 1.8.0-3.5.2
1.8.0-3.5.2
mariadb-connector-c
SUSE:Linux Enterprise Server for SAP Applications 12 SP5
 before 3.1.22-2.35.1
3.1.22-2.35.1
mariadb104
SUSE:Linux Enterprise Server for SAP Applications 12 SP5
 before 10.4.30-8.5.46
10.4.30-8.5.46
python-mysqlclient
SUSE:Linux Enterprise Server for SAP Applications 12 SP5
 before 1.3.14-8.9.2
1.3.14-8.9.2
mariadb
SUSE:Linux Enterprise Server for SAP Applications 12
 before 10.0.29-20.23.1
10.0.29-20.23.1
mariadb
SUSE:Linux Enterprise Server 12-LTSS
 before 10.0.29-20.23.1
10.0.29-20.23.1
mariadb
SUSE:Linux Enterprise Desktop 12 SP1
 before 10.0.29-22.1
10.0.29-22.1
mariadb
SUSE:Linux Enterprise Desktop 12 SP2
 before 10.0.29-22.1
10.0.29-22.1
mariadb
SUSE:Linux Enterprise Server for Raspberry Pi 12 SP2
 before 10.0.29-22.1
10.0.29-22.1
mariadb
SUSE:Linux Enterprise Software Development Kit 12 SP1
 before 10.0.29-22.1
10.0.29-22.1
mariadb
SUSE:Linux Enterprise Software Development Kit 12 SP2
 before 10.0.29-22.1
10.0.29-22.1
mariadb
SUSE:Linux Enterprise Server 12 SP1
 before 10.0.29-22.1
10.0.29-22.1
mariadb
SUSE:Linux Enterprise Server for SAP Applications 12 SP1
 before 10.0.29-22.1
10.0.29-22.1
mariadb
SUSE:Linux Enterprise Server 12 SP2
 before 10.0.29-22.1
10.0.29-22.1
mariadb
SUSE:Linux Enterprise Server for SAP Applications 12 SP2
 before 10.0.29-22.1
10.0.29-22.1
mariadb
SUSE:Linux Enterprise Workstation Extension 12 SP1
 before 10.0.29-22.1
10.0.29-22.1
mariadb
SUSE:Linux Enterprise Workstation Extension 12 SP2
 before 10.0.29-22.1
10.0.29-22.1
mysql-5.5
Ubuntu:14.04:LTS
 before 5.5.52-0ubuntu0.14.04.1, plus listed versions
5.5.32-0ubuntu75.5.34-0ubuntu15.5.34-0ubuntu25.5.35-0ubuntu15.5.35+dfsg-1ubuntu1
Show 10 moreShow less
5.5.37-0ubuntu0.14.04.15.5.38-0ubuntu0.14.04.15.5.40-0ubuntu0.14.04.15.5.41-0ubuntu0.14.04.15.5.43-0ubuntu0.14.04.15.5.44-0ubuntu0.14.04.15.5.46-0ubuntu0.14.04.25.5.47-0ubuntu0.14.04.15.5.49-0ubuntu0.14.04.15.5.50-0ubuntu0.14.04.1
5.5.52-0ubuntu0.14.04.1
mariadb-10.0
Ubuntu:16.04:LTS
 before 10.0.29-0ubuntu0.16.04.1, plus listed versions
10.0.20-0ubuntu0.15.04.110.0.22-0ubuntu110.0.23-110.0.23-210.0.24-710.0.25-0ubuntu0.16.04.110.0.27-0ubuntu0.16.04.110.0.28-0ubuntu0.16.04.1
10.0.29-0ubuntu0.16.04.1
mariadb
openSUSE:Tumbleweed
 before 10.6.4-2.1
10.6.4-2.1

Public exploits

Links only. Every CVE stores no exploit code.

Public exploits
SourceLinkDate
Exploit-DBMySQL / MariaDB / PerconaDB 5.5.x/5.6.x/5.7.x - 'root' System User Privilege Escalation2016-11-01

History

History
RecordedChangedSources
aliasesEUVD
first indexedCVE List, Exploit-DB, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2016-6664 is a high vulnerability (CVSS 7.0) in Mariadb, published December 13, 2016. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 2.97%, the 87th percentile. Fixed in mariadb 10.1.21-r0.

References

Show 194 moreShow less
This page doesn't list everything

Left out here: 450 references. The JSON record has them.

Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open