CVE-2016-6664
mysqld_safe in Oracle MySQL through 5.5.51, 5.6.x through 5.6.32, and 5.7.x through 5.7.14;...
CVE-2016-6664 is a high vulnerability (CVSS 7.0) in Mariadb, published December 13, 2016. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 2.97%, the 87th percentile. Fixed in mariadb 10.1.21-r0.
mysqld_safe in Oracle MySQL through 5.5.51, 5.6.x through 5.6.32, and 5.7.x through 5.7.14; MariaDB; Percona Server before 5.5.51-38.2, 5.6.x before 5.6.32-78-1, and 5.7.x before 5.7.14-8; and Percona XtraDB Cluster before 5.5.41-37.0, 5.6.x before 5.6.32-25.17, and 5.7.x before 5.7.14-26.17, when using file-based logging, allows local users with access to the mysql account to gain root privileges via a symlink attack on error logs and possibly other files.
Attack profile
How easy it is to exploit
- Attack vector
- Local
- Complexity
- High
- Privileges needed
- Low
- User interaction
- None
What an attacker can affect
- Confidentiality
- High
- Integrity
- High
- Availability
- High
Exploit likelihood
What each source reports
NVD Score used
mysqld_safe in Oracle MySQL through 5.5.51, 5.6.x through 5.6.32, and 5.7.x through 5.7.14; MariaDB; Percona Server before 5.5.51-38.2, 5.6.x before 5.6.32-78-1, and 5.7.x before 5.7.14-8; and Percona XtraDB Cluster before 5.5.41-37.0, 5.6.x before 5.6.32-25.17, and 5.7.x before 5.7.14-26.17, when using file-based logging, allows local users with access to the mysql account to gain root privileges via a symlink attack on error logs and possibly other files.
- Record
CVE-2016-6664- CVSS 3.1
- 7.0 High
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H - CVSS 2.0
- 6.9 Medium
AV:L/AC:M/Au:N/C:C/I:C/A:C - Weakness
- CWE-59
- Updated
- 2026-11-02
CVE List No score
mysqld_safe in Oracle MySQL through 5.5.51, 5.6.x through 5.6.32, and 5.7.x through 5.7.14; MariaDB; Percona Server before 5.5.51-38.2, 5.6.x before 5.6.32-78-1, and 5.7.x before 5.7.14-8; and Percona XtraDB Cluster before 5.5.41-37.0, 5.6.x before 5.6.32-25.17, and 5.7.x before 5.7.14-26.17, when using file-based logging, allows local users with access to the mysql account to gain root privileges via a symlink attack on error logs and possibly other files.
- Record
CVE-2016-6664- Updated
- 2026-11-02
EUVDEUVD-2016-7567 No score
mysqld_safe in Oracle MySQL through 5.5.51, 5.6.x through 5.6.32, and 5.7.x through 5.7.14; MariaDB; Percona Server before 5.5.51-38.2, 5.6.x before 5.6.32-78-1, and 5.7.x before 5.7.14-8; and Percona XtraDB Cluster before 5.5.41-37.0, 5.6.x before 5.6.32-25.17, and 5.7.x before 5.7.14-26.17, when using file-based logging, allows local users with access to the mysql account to gain root privileges via a symlink attack on error logs and possibly other files.
- Record
EUVD-2016-7567- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-f9x4-3x96-w2vf
mysqld_safe in Oracle MySQL through 5.5.51, 5.6.x through 5.6.32, and 5.7.x through 5.7.14;...
mysqld_safe in Oracle MySQL through 5.5.51, 5.6.x through 5.6.32, and 5.7.x through 5.7.14; MariaDB; Percona Server before 5.5.51-38.2, 5.6.x before 5.6.32-78-1, and 5.7.x before 5.7.14-8; and Percona XtraDB Cluster before 5.5.41-37.0, 5.6.x before 5.6.32-25.17, and 5.7.x before 5.7.14-26.17, when using file-based logging, allows local users with access to the mysql account to gain root privileges via a symlink attack on error logs and possibly other files.
- Record
GHSA-f9x4-3x96-w2vf- CVSS 3.1
- 7.0 High
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H - Weakness
- CWE-59
- Updated
- 2026-11-02
OSVALPINE-CVE-2016-6664
mysqld_safe in Oracle MySQL through 5.5.51, 5.6.x through 5.6.32, and 5.7.x through 5.7.14; MariaDB; Percona Server before 5.5.51-38.2, 5.6.x before 5.6.32-78-1, and 5.7.x before 5.7.14-8; and Percona XtraDB Cluster before 5.5.41-37.0, 5.6.x before 5.6.32-25.17, and 5.7.x before 5.7.14-26.17, when using file-based logging, allows local users with access to the mysql account to gain root privileges via a symlink attack on error logs and possibly other files.
- Record
ALPINE-CVE-2016-6664- CVSS 3.1
- 7.0 High
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVBELL-CVE-2016-6664
CVE-2016-6664 does not affect BellSoft software
- Record
BELL-CVE-2016-6664- CVSS 3.1
- 7.0 High
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
Show 13 moreShow less
OSV
mysqld_safe in Oracle MySQL through 5.5.51, 5.6.x through 5.6.32, and 5.7.x through 5.7.14; MariaDB; Percona Server before 5.5.51-38.2, 5.6.x before 5.6.32-78-1, and 5.7.x before 5.7.14-8; and Percona XtraDB Cluster before 5.5.41-37.0, 5.6.x before 5.6.32-25.17, and 5.7.x before 5.7.14-26.17, when using file-based logging, allows local users with access to the mysql account to gain root privileges via a symlink attack on error logs and possibly other files.
- Record
CVE-2016-6664- CVSS 3.1
- 7.0 High
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVRHSA-2016:2130
Red Hat Security Advisory: mysql55-mysql security update
- Record
RHSA-2016:2130- CVSS 3.0
- 9.8 Critical
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVRHSA-2016:2749
Red Hat Security Advisory: rh-mysql56-mysql security update
- Record
RHSA-2016:2749- CVSS 3.0
- 9.8 Critical
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVRHSA-2017:2192
Red Hat Security Advisory: mariadb security and bug fix update
- Record
RHSA-2017:2192- CVSS 3.0
- 7.8 High
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVRHSA-2018:0279
Red Hat Security Advisory: rh-mariadb100-mariadb security update
- Record
RHSA-2018:0279- CVSS 3.0
- 7.8 High
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVRHSA-2018:0574
Red Hat Security Advisory: rh-mariadb101-mariadb and rh-mariadb101-galera security and bug fix update
- Record
RHSA-2018:0574- CVSS 3.0
- 7.8 High
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVUBUNTU-CVE-2016-6664
mysqld_safe in Oracle MySQL through 5.5.51, 5.6.x through 5.6.32, and 5.7.x through 5.7.14; MariaDB; Percona Server before 5.5.51-38.2, 5.6.x before 5.6.32-78-1, and 5.7.x before 5.7.14-8; and Percona XtraDB Cluster before 5.5.41-37.0, 5.6.x before 5.6.32-25.17, and 5.7.x before 5.7.14-26.17, when using file-based logging, allows local users with access to the mysql account to gain root privileges via a symlink attack on error logs and possibly other files.
- Record
UBUNTU-CVE-2016-6664- CVSS 3.1
- 7.0 High
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H - CVSS 3.0
- 7.0 High
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVMGASA-2017-0054 No score
Updated mariadb packages fix security vulnerability
Root Privilege Escalation (CVE-2016-6664).
Unspecified vulnerability affecting the Optimizer component (CVE-2017-3238).
Unspecified vulnerability affecting the Charsets component (CVE-2017-3243).
Unspecified vulnerability affecing the DML component (CVE-2017-3244).
Unspecified vulnerability affecting InnoDB (CVE-2017-3257).
Unspecified vulnerability in the DDL component (CVE-2017-3258).
Unsafe chmod/chown use in init script (CVE-2017-3265).
Unrestricted mysqld_safe's ledir (CVE-2017-3291).
Insecure error log file handling in mysqld_safe, due to an incomplete fix for CVE-2016-6664 (CVE-2017-3312).
Unspecified vulnerability affecting Logging (CVE-2017-3317).
Unspecified vulnerability affecting Error Handling (CVE-2017-3318).
Applications using the client library for MySQL (libmysqlclient.so) had a use-after-free issue that could cause the applications to crash (bsc#1022428).
- Record
MGASA-2017-0054- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:11038-1 No score
libmariadbd-devel-10.6.4-2.1 on GA media
These are all security issues fixed in the libmariadbd-devel-10.6.4-2.1 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:11038-1- Updated
- 2026-11-02
OSVSUSE-RU-2023:3956-1 No score
Recommended update for mariadb104
This update for mariadb104 fixes the following issues:
- Implement version 10.4 of MariaDB (jsc#PED-2455):
- It is possible to use more than one authentication plugin for each user account.
- The root user account is being created with the ability to use two authentication plugins.
- All user accounts, passwords, and global privileges are now stored in the mysql.global_priv table.
- Is being supported for User Password Expiry, which is not active by default.
- Faster privilege checks for MariaDB setups with many user accounts or many database grants.
- Update mysql-systemd-helper to be aware of custom group (bsc#1200105)
- MariaDB is now support lz4 compression for 'INNODB'. (bsc#1186031)
- Add 'mysql-user.conf' file to enable systemd generating mysql user in containers. (bsc#1173028)
- Fixes an issue when MariaDB is ignoring the value of the parameter 'open_files_limit' in the global variables. (bsc#1180014)
- Record
SUSE-RU-2023:3956-1- Updated
- 2026-11-02
OSVSUSE-RU-2023:4991-1 No score
Recommended update for mariadb104
This update for mariadb104 fixes the following issues:
- Implement version 10.4 of MariaDB (jsc#PED-2455):
- It is possible to use more than one authentication plugin for each user account.
- The root user account is being created with the ability to use two authentication plugins.
- All user accounts, passwords, and global privileges are now stored in the mysql.global_priv table.
- Is being supported for User Password Expiry, which is not active by default.
- Faster privilege checks for MariaDB setups with many user accounts or many database grants.
- Update mysql-systemd-helper to be aware of custom group (bsc#1200105)
- MariaDB is now support lz4 compression for 'INNODB'. (bsc#1186031)
- Add 'mysql-user.conf' file to enable systemd generating mysql user in containers. (bsc#1173028)
- Fixes an issue when MariaDB is ignoring the value of the parameter 'open_files_limit' in the global variables. (bsc#1180014)
- Record
SUSE-RU-2023:4991-1- Updated
- 2026-11-02
OSVSUSE-SU-2017:0411-1 No score
Security update for mariadb
This mariadb version update to 10.0.29 fixes the following issues:
-
CVE-2017-3318: unspecified vulnerability affecting Error Handling (bsc#1020896)
-
CVE-2017-3317: unspecified vulnerability affecting Logging (bsc#1020894)
-
CVE-2017-3312: insecure error log file handling in mysqld_safe, incomplete CVE-2016-6664 (bsc#1020873)
-
CVE-2017-3291: unrestricted mysqld_safe's ledir (bsc#1020884)
-
CVE-2017-3265: unsafe chmod/chown use in init script (bsc#1020885)
-
CVE-2017-3258: unspecified vulnerability in the DDL component (bsc#1020875)
-
CVE-2017-3257: unspecified vulnerability affecting InnoDB (bsc#1020878)
-
CVE-2017-3244: unspecified vulnerability affecing the DML component (bsc#1020877)
-
CVE-2017-3243: unspecified vulnerability affecting the Charsets component (bsc#1020891)
-
CVE-2017-3238: unspecified vulnerability affecting the Optimizer component (bsc#1020882)
-
CVE-2016-6664: Root Privilege Escalation (bsc#1008253)
-
Applications using the client library for MySQL (libmysqlclient.so) had a use-after-free issue that could cause the applications to crash (bsc#1022428)
-
notable changes:
- XtraDB updated to 5.6.34-79.1
- TokuDB updated to 5.6.34-79.1
- Innodb updated to 5.6.35
- Performance Schema updated to 5.6.35
Release notes and changelog:
- Record
SUSE-SU-2017:0411-1- Updated
- 2026-11-02
OSVSUSE-SU-2017:0412-1 No score
Security update for mariadb
This mariadb version update to 10.0.29 fixes the following issues:
-
CVE-2017-3318: unspecified vulnerability affecting Error Handling (bsc#1020896)
-
CVE-2017-3317: unspecified vulnerability affecting Logging (bsc#1020894)
-
CVE-2017-3312: insecure error log file handling in mysqld_safe, incomplete CVE-2016-6664 (bsc#1020873)
-
CVE-2017-3291: unrestricted mysqld_safe's ledir (bsc#1020884)
-
CVE-2017-3265: unsafe chmod/chown use in init script (bsc#1020885)
-
CVE-2017-3258: unspecified vulnerability in the DDL component (bsc#1020875)
-
CVE-2017-3257: unspecified vulnerability affecting InnoDB (bsc#1020878)
-
CVE-2017-3244: unspecified vulnerability affecing the DML component (bsc#1020877)
-
CVE-2017-3243: unspecified vulnerability affecting the Charsets component (bsc#1020891)
-
CVE-2017-3238: unspecified vulnerability affecting the Optimizer component (bsc#1020882)
-
CVE-2016-6664: Root Privilege Escalation (bsc#1008253)
-
Applications using the client library for MySQL (libmysqlclient.so) had a use-after-free issue that could cause the applications to crash (bsc#1022428)
-
notable changes:
- XtraDB updated to 5.6.34-79.1
- TokuDB updated to 5.6.34-79.1
- Innodb updated to 5.6.35
- Performance Schema updated to 5.6.35
Release notes and changelog:
- Record
SUSE-SU-2017:0412-1- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
mariadbAlpine:v3.10 |
5.5.0 up to 10.1.21-r0 | 10.1.21-r0 |
mariadbAlpine:v3.11 |
5.5.0 up to 10.1.21-r0 | 10.1.21-r0 |
mariadbAlpine:v3.12 |
5.5.0 up to 10.1.21-r0 | 10.1.21-r0 |
mariadbAlpine:v3.13 |
5.5.0 up to 10.1.21-r0 | 10.1.21-r0 |
mariadbAlpine:v3.14 |
5.5.0 up to 10.1.21-r0 | 10.1.21-r0 |
mariadbAlpine:v3.15 |
5.5.0 up to 10.1.21-r0 | 10.1.21-r0 |
mariadbAlpine:v3.16 |
5.5.0 up to 10.1.21-r0 | 10.1.21-r0 |
mariadbAlpine:v3.17 |
5.5.0 up to 10.1.21-r0 | 10.1.21-r0 |
mariadbAlpine:v3.18 |
5.5.0 up to 10.1.21-r0 | 10.1.21-r0 |
mariadbAlpine:v3.19 |
5.5.0 up to 10.1.21-r0 | 10.1.21-r0 |
Show 162 moreShow less
| Package | Affected | Fixed |
|---|---|---|
mariadbAlpine:v3.20 |
5.5.0 up to 10.1.21-r0 | 10.1.21-r0 |
mariadbAlpine:v3.21 |
5.5.0 up to 10.1.21-r0 | 10.1.21-r0 |
mariadbAlpine:v3.22 |
5.5.0 up to 10.1.21-r0 | 10.1.21-r0 |
mariadbAlpine:v3.23 |
5.5.0 up to 10.1.21-r0 | 10.1.21-r0 |
mariadbAlpine:v3.24 |
5.5.0 up to 10.1.21-r0 | 10.1.21-r0 |
mariadbAlpine:v3.3 |
5.5.0 up to 10.1.21-r0 | 10.1.21-r0 |
mariadbAlpine:v3.4 |
5.5.0 up to 10.1.21-r0 | 10.1.21-r0 |
mariadbAlpine:v3.5 |
5.5.0 up to 10.1.21-r0 | 10.1.21-r0 |
mariadbAlpine:v3.6 |
5.5.0 up to 10.1.21-r0 | 10.1.21-r0 |
mariadbAlpine:v3.7 |
5.5.0 up to 10.1.21-r0 | 10.1.21-r0 |
mariadbAlpine:v3.8 |
5.5.0 up to 10.1.21-r0 | 10.1.21-r0 |
mariadbAlpine:v3.9 |
5.5.0 up to 10.1.21-r0 | 10.1.21-r0 |
mariadb-10.0Debian:8 |
before 10.0.29-0+deb8u1, plus listed versions 10.0.16-110.0.17-110.0.17-1~exp110.0.17-1~exp210.0.18-1~exp1 Show 45 moreShow less10.0.19-110.0.20-0+deb8u110.0.20-110.0.20-210.0.20-310.0.21-110.0.21-210.0.21-310.0.22-0+deb8u110.0.22-110.0.22-210.0.22-2~exp110.0.22-2~exp210.0.22-310.0.22-410.0.22-4~exp110.0.22-510.0.22-610.0.23-0+deb8u110.0.23-110.0.23-210.0.23-310.0.24-110.0.24-210.0.24-310.0.24-410.0.24-4~exp110.0.24-510.0.24-610.0.24-710.0.25-0+deb8u110.0.25-110.0.26-0+deb8u110.0.26-110.0.26-210.0.26-2~exp210.0.26-2~exp310.0.26-310.0.27-0+deb8u110.0.27-110.0.27-210.0.28-0+deb8u110.0.28-110.0.28-210.0.28-3 |
10.0.29-0+deb8u1 |
mariadbMageia:5 |
before 10.0.29-1.3.mga5 | 10.0.29-1.3.mga5 |
mysql55-mysqlRed Hat:rhel_software_collections:2::el6 |
before 0:5.5.52-1.el6 | 0:5.5.52-1.el6 |
mysql55-mysql-benchRed Hat:rhel_software_collections:2::el6 |
before 0:5.5.52-1.el6 | 0:5.5.52-1.el6 |
mysql55-mysql-debuginfoRed Hat:rhel_software_collections:2::el6 |
before 0:5.5.52-1.el6 | 0:5.5.52-1.el6 |
mysql55-mysql-develRed Hat:rhel_software_collections:2::el6 |
before 0:5.5.52-1.el6 | 0:5.5.52-1.el6 |
mysql55-mysql-libsRed Hat:rhel_software_collections:2::el6 |
before 0:5.5.52-1.el6 | 0:5.5.52-1.el6 |
mysql55-mysql-serverRed Hat:rhel_software_collections:2::el6 |
before 0:5.5.52-1.el6 | 0:5.5.52-1.el6 |
mysql55-mysql-testRed Hat:rhel_software_collections:2::el6 |
before 0:5.5.52-1.el6 | 0:5.5.52-1.el6 |
mysql55-mysqlRed Hat:rhel_software_collections:2::el7 |
before 0:5.5.52-1.el7 | 0:5.5.52-1.el7 |
mysql55-mysql-benchRed Hat:rhel_software_collections:2::el7 |
before 0:5.5.52-1.el7 | 0:5.5.52-1.el7 |
mysql55-mysql-debuginfoRed Hat:rhel_software_collections:2::el7 |
before 0:5.5.52-1.el7 | 0:5.5.52-1.el7 |
mysql55-mysql-develRed Hat:rhel_software_collections:2::el7 |
before 0:5.5.52-1.el7 | 0:5.5.52-1.el7 |
mysql55-mysql-libsRed Hat:rhel_software_collections:2::el7 |
before 0:5.5.52-1.el7 | 0:5.5.52-1.el7 |
mysql55-mysql-serverRed Hat:rhel_software_collections:2::el7 |
before 0:5.5.52-1.el7 | 0:5.5.52-1.el7 |
mysql55-mysql-testRed Hat:rhel_software_collections:2::el7 |
before 0:5.5.52-1.el7 | 0:5.5.52-1.el7 |
rh-mysql56-mysqlRed Hat:rhel_software_collections:2::el6 |
before 0:5.6.34-2.el6 | 0:5.6.34-2.el6 |
rh-mysql56-mysql-benchRed Hat:rhel_software_collections:2::el6 |
before 0:5.6.34-2.el6 | 0:5.6.34-2.el6 |
rh-mysql56-mysql-commonRed Hat:rhel_software_collections:2::el6 |
before 0:5.6.34-2.el6 | 0:5.6.34-2.el6 |
rh-mysql56-mysql-configRed Hat:rhel_software_collections:2::el6 |
before 0:5.6.34-2.el6 | 0:5.6.34-2.el6 |
rh-mysql56-mysql-debuginfoRed Hat:rhel_software_collections:2::el6 |
before 0:5.6.34-2.el6 | 0:5.6.34-2.el6 |
rh-mysql56-mysql-develRed Hat:rhel_software_collections:2::el6 |
before 0:5.6.34-2.el6 | 0:5.6.34-2.el6 |
rh-mysql56-mysql-errmsgRed Hat:rhel_software_collections:2::el6 |
before 0:5.6.34-2.el6 | 0:5.6.34-2.el6 |
rh-mysql56-mysql-serverRed Hat:rhel_software_collections:2::el6 |
before 0:5.6.34-2.el6 | 0:5.6.34-2.el6 |
rh-mysql56-mysql-testRed Hat:rhel_software_collections:2::el6 |
before 0:5.6.34-2.el6 | 0:5.6.34-2.el6 |
rh-mysql56-mysqlRed Hat:rhel_software_collections:2::el7 |
before 0:5.6.34-2.el7 | 0:5.6.34-2.el7 |
rh-mysql56-mysql-benchRed Hat:rhel_software_collections:2::el7 |
before 0:5.6.34-2.el7 | 0:5.6.34-2.el7 |
rh-mysql56-mysql-commonRed Hat:rhel_software_collections:2::el7 |
before 0:5.6.34-2.el7 | 0:5.6.34-2.el7 |
rh-mysql56-mysql-configRed Hat:rhel_software_collections:2::el7 |
before 0:5.6.34-2.el7 | 0:5.6.34-2.el7 |
rh-mysql56-mysql-debuginfoRed Hat:rhel_software_collections:2::el7 |
before 0:5.6.34-2.el7 | 0:5.6.34-2.el7 |
rh-mysql56-mysql-develRed Hat:rhel_software_collections:2::el7 |
before 0:5.6.34-2.el7 | 0:5.6.34-2.el7 |
rh-mysql56-mysql-errmsgRed Hat:rhel_software_collections:2::el7 |
before 0:5.6.34-2.el7 | 0:5.6.34-2.el7 |
rh-mysql56-mysql-serverRed Hat:rhel_software_collections:2::el7 |
before 0:5.6.34-2.el7 | 0:5.6.34-2.el7 |
rh-mysql56-mysql-testRed Hat:rhel_software_collections:2::el7 |
before 0:5.6.34-2.el7 | 0:5.6.34-2.el7 |
mariadb-benchRed Hat:enterprise_linux:7::client |
before 1:5.5.56-2.el7 | 1:5.5.56-2.el7 |
mariadb-debuginfoRed Hat:enterprise_linux:7::client |
before 1:5.5.56-2.el7 | 1:5.5.56-2.el7 |
mariadb-develRed Hat:enterprise_linux:7::client |
before 1:5.5.56-2.el7 | 1:5.5.56-2.el7 |
mariadb-embeddedRed Hat:enterprise_linux:7::client |
before 1:5.5.56-2.el7 | 1:5.5.56-2.el7 |
mariadb-embedded-develRed Hat:enterprise_linux:7::client |
before 1:5.5.56-2.el7 | 1:5.5.56-2.el7 |
mariadb-testRed Hat:enterprise_linux:7::client |
before 1:5.5.56-2.el7 | 1:5.5.56-2.el7 |
mariadbRed Hat:enterprise_linux:7::client |
before 1:5.5.56-2.el7 | 1:5.5.56-2.el7 |
mariadb-libsRed Hat:enterprise_linux:7::client |
before 1:5.5.56-2.el7 | 1:5.5.56-2.el7 |
mariadb-serverRed Hat:enterprise_linux:7::client |
before 1:5.5.56-2.el7 | 1:5.5.56-2.el7 |
mariadb-benchRed Hat:enterprise_linux:7::computenode |
before 1:5.5.56-2.el7 | 1:5.5.56-2.el7 |
mariadb-debuginfoRed Hat:enterprise_linux:7::computenode |
before 1:5.5.56-2.el7 | 1:5.5.56-2.el7 |
mariadb-develRed Hat:enterprise_linux:7::computenode |
before 1:5.5.56-2.el7 | 1:5.5.56-2.el7 |
mariadb-embeddedRed Hat:enterprise_linux:7::computenode |
before 1:5.5.56-2.el7 | 1:5.5.56-2.el7 |
mariadb-embedded-develRed Hat:enterprise_linux:7::computenode |
before 1:5.5.56-2.el7 | 1:5.5.56-2.el7 |
mariadb-serverRed Hat:enterprise_linux:7::computenode |
before 1:5.5.56-2.el7 | 1:5.5.56-2.el7 |
mariadb-testRed Hat:enterprise_linux:7::computenode |
before 1:5.5.56-2.el7 | 1:5.5.56-2.el7 |
mariadbRed Hat:enterprise_linux:7::computenode |
before 1:5.5.56-2.el7 | 1:5.5.56-2.el7 |
mariadb-libsRed Hat:enterprise_linux:7::computenode |
before 1:5.5.56-2.el7 | 1:5.5.56-2.el7 |
mariadb-debuginfoRed Hat:enterprise_linux:7::server |
before 1:5.5.56-2.el7 | 1:5.5.56-2.el7 |
mariadb-embeddedRed Hat:enterprise_linux:7::server |
before 1:5.5.56-2.el7 | 1:5.5.56-2.el7 |
mariadb-embedded-develRed Hat:enterprise_linux:7::server |
before 1:5.5.56-2.el7 | 1:5.5.56-2.el7 |
mariadbRed Hat:enterprise_linux:7::server |
before 1:5.5.56-2.el7 | 1:5.5.56-2.el7 |
mariadb-benchRed Hat:enterprise_linux:7::server |
before 1:5.5.56-2.el7 | 1:5.5.56-2.el7 |
mariadb-develRed Hat:enterprise_linux:7::server |
before 1:5.5.56-2.el7 | 1:5.5.56-2.el7 |
mariadb-libsRed Hat:enterprise_linux:7::server |
before 1:5.5.56-2.el7 | 1:5.5.56-2.el7 |
mariadb-serverRed Hat:enterprise_linux:7::server |
before 1:5.5.56-2.el7 | 1:5.5.56-2.el7 |
mariadb-testRed Hat:enterprise_linux:7::server |
before 1:5.5.56-2.el7 | 1:5.5.56-2.el7 |
mariadb-debuginfoRed Hat:enterprise_linux:7::workstation |
before 1:5.5.56-2.el7 | 1:5.5.56-2.el7 |
mariadb-embeddedRed Hat:enterprise_linux:7::workstation |
before 1:5.5.56-2.el7 | 1:5.5.56-2.el7 |
mariadb-embedded-develRed Hat:enterprise_linux:7::workstation |
before 1:5.5.56-2.el7 | 1:5.5.56-2.el7 |
mariadbRed Hat:enterprise_linux:7::workstation |
before 1:5.5.56-2.el7 | 1:5.5.56-2.el7 |
mariadb-benchRed Hat:enterprise_linux:7::workstation |
before 1:5.5.56-2.el7 | 1:5.5.56-2.el7 |
mariadb-develRed Hat:enterprise_linux:7::workstation |
before 1:5.5.56-2.el7 | 1:5.5.56-2.el7 |
mariadb-libsRed Hat:enterprise_linux:7::workstation |
before 1:5.5.56-2.el7 | 1:5.5.56-2.el7 |
mariadb-serverRed Hat:enterprise_linux:7::workstation |
before 1:5.5.56-2.el7 | 1:5.5.56-2.el7 |
mariadb-testRed Hat:enterprise_linux:7::workstation |
before 1:5.5.56-2.el7 | 1:5.5.56-2.el7 |
rh-mariadb100-mariadbRed Hat:rhel_software_collections:3::el6 |
before 1:10.0.33-3.el6 | 1:10.0.33-3.el6 |
rh-mariadb100-mariadb-benchRed Hat:rhel_software_collections:3::el6 |
before 1:10.0.33-3.el6 | 1:10.0.33-3.el6 |
rh-mariadb100-mariadb-commonRed Hat:rhel_software_collections:3::el6 |
before 1:10.0.33-3.el6 | 1:10.0.33-3.el6 |
rh-mariadb100-mariadb-configRed Hat:rhel_software_collections:3::el6 |
before 1:10.0.33-3.el6 | 1:10.0.33-3.el6 |
rh-mariadb100-mariadb-debuginfoRed Hat:rhel_software_collections:3::el6 |
before 1:10.0.33-3.el6 | 1:10.0.33-3.el6 |
rh-mariadb100-mariadb-develRed Hat:rhel_software_collections:3::el6 |
before 1:10.0.33-3.el6 | 1:10.0.33-3.el6 |
rh-mariadb100-mariadb-errmsgRed Hat:rhel_software_collections:3::el6 |
before 1:10.0.33-3.el6 | 1:10.0.33-3.el6 |
rh-mariadb100-mariadb-oqgraph-engineRed Hat:rhel_software_collections:3::el6 |
before 1:10.0.33-3.el6 | 1:10.0.33-3.el6 |
rh-mariadb100-mariadb-serverRed Hat:rhel_software_collections:3::el6 |
before 1:10.0.33-3.el6 | 1:10.0.33-3.el6 |
rh-mariadb100-mariadb-testRed Hat:rhel_software_collections:3::el6 |
before 1:10.0.33-3.el6 | 1:10.0.33-3.el6 |
rh-mariadb100-mariadbRed Hat:rhel_software_collections:3::el7 |
before 1:10.0.33-3.el7 | 1:10.0.33-3.el7 |
rh-mariadb100-mariadb-benchRed Hat:rhel_software_collections:3::el7 |
before 1:10.0.33-3.el7 | 1:10.0.33-3.el7 |
rh-mariadb100-mariadb-commonRed Hat:rhel_software_collections:3::el7 |
before 1:10.0.33-3.el7 | 1:10.0.33-3.el7 |
rh-mariadb100-mariadb-configRed Hat:rhel_software_collections:3::el7 |
before 1:10.0.33-3.el7 | 1:10.0.33-3.el7 |
rh-mariadb100-mariadb-debuginfoRed Hat:rhel_software_collections:3::el7 |
before 1:10.0.33-3.el7 | 1:10.0.33-3.el7 |
rh-mariadb100-mariadb-develRed Hat:rhel_software_collections:3::el7 |
before 1:10.0.33-3.el7 | 1:10.0.33-3.el7 |
rh-mariadb100-mariadb-errmsgRed Hat:rhel_software_collections:3::el7 |
before 1:10.0.33-3.el7 | 1:10.0.33-3.el7 |
rh-mariadb100-mariadb-oqgraph-engineRed Hat:rhel_software_collections:3::el7 |
before 1:10.0.33-3.el7 | 1:10.0.33-3.el7 |
rh-mariadb100-mariadb-serverRed Hat:rhel_software_collections:3::el7 |
before 1:10.0.33-3.el7 | 1:10.0.33-3.el7 |
rh-mariadb100-mariadb-testRed Hat:rhel_software_collections:3::el7 |
before 1:10.0.33-3.el7 | 1:10.0.33-3.el7 |
rh-mariadb101-galeraRed Hat:rhel_software_collections:3::el6 |
before 0:25.3.12-12.el6 | 0:25.3.12-12.el6 |
rh-mariadb101-galera-debuginfoRed Hat:rhel_software_collections:3::el6 |
before 0:25.3.12-12.el6 | 0:25.3.12-12.el6 |
rh-mariadb101-mariadbRed Hat:rhel_software_collections:3::el6 |
before 1:10.1.29-3.el6 | 1:10.1.29-3.el6 |
rh-mariadb101-mariadb-benchRed Hat:rhel_software_collections:3::el6 |
before 1:10.1.29-3.el6 | 1:10.1.29-3.el6 |
rh-mariadb101-mariadb-commonRed Hat:rhel_software_collections:3::el6 |
before 1:10.1.29-3.el6 | 1:10.1.29-3.el6 |
rh-mariadb101-mariadb-configRed Hat:rhel_software_collections:3::el6 |
before 1:10.1.29-3.el6 | 1:10.1.29-3.el6 |
rh-mariadb101-mariadb-debuginfoRed Hat:rhel_software_collections:3::el6 |
before 1:10.1.29-3.el6 | 1:10.1.29-3.el6 |
rh-mariadb101-mariadb-develRed Hat:rhel_software_collections:3::el6 |
before 1:10.1.29-3.el6 | 1:10.1.29-3.el6 |
rh-mariadb101-mariadb-errmsgRed Hat:rhel_software_collections:3::el6 |
before 1:10.1.29-3.el6 | 1:10.1.29-3.el6 |
rh-mariadb101-mariadb-oqgraph-engineRed Hat:rhel_software_collections:3::el6 |
before 1:10.1.29-3.el6 | 1:10.1.29-3.el6 |
rh-mariadb101-mariadb-serverRed Hat:rhel_software_collections:3::el6 |
before 1:10.1.29-3.el6 | 1:10.1.29-3.el6 |
rh-mariadb101-mariadb-server-galeraRed Hat:rhel_software_collections:3::el6 |
before 1:10.1.29-3.el6 | 1:10.1.29-3.el6 |
rh-mariadb101-mariadb-testRed Hat:rhel_software_collections:3::el6 |
before 1:10.1.29-3.el6 | 1:10.1.29-3.el6 |
rh-mariadb101-galeraRed Hat:rhel_software_collections:3::el7 |
before 0:25.3.12-12.el7 | 0:25.3.12-12.el7 |
rh-mariadb101-galera-debuginfoRed Hat:rhel_software_collections:3::el7 |
before 0:25.3.12-12.el7 | 0:25.3.12-12.el7 |
rh-mariadb101-mariadbRed Hat:rhel_software_collections:3::el7 |
before 1:10.1.29-3.el7 | 1:10.1.29-3.el7 |
rh-mariadb101-mariadb-benchRed Hat:rhel_software_collections:3::el7 |
before 1:10.1.29-3.el7 | 1:10.1.29-3.el7 |
rh-mariadb101-mariadb-commonRed Hat:rhel_software_collections:3::el7 |
before 1:10.1.29-3.el7 | 1:10.1.29-3.el7 |
rh-mariadb101-mariadb-configRed Hat:rhel_software_collections:3::el7 |
before 1:10.1.29-3.el7 | 1:10.1.29-3.el7 |
rh-mariadb101-mariadb-debuginfoRed Hat:rhel_software_collections:3::el7 |
before 1:10.1.29-3.el7 | 1:10.1.29-3.el7 |
rh-mariadb101-mariadb-develRed Hat:rhel_software_collections:3::el7 |
before 1:10.1.29-3.el7 | 1:10.1.29-3.el7 |
rh-mariadb101-mariadb-errmsgRed Hat:rhel_software_collections:3::el7 |
before 1:10.1.29-3.el7 | 1:10.1.29-3.el7 |
rh-mariadb101-mariadb-oqgraph-engineRed Hat:rhel_software_collections:3::el7 |
before 1:10.1.29-3.el7 | 1:10.1.29-3.el7 |
rh-mariadb101-mariadb-serverRed Hat:rhel_software_collections:3::el7 |
before 1:10.1.29-3.el7 | 1:10.1.29-3.el7 |
rh-mariadb101-mariadb-server-galeraRed Hat:rhel_software_collections:3::el7 |
before 1:10.1.29-3.el7 | 1:10.1.29-3.el7 |
rh-mariadb101-mariadb-testRed Hat:rhel_software_collections:3::el7 |
before 1:10.1.29-3.el7 | 1:10.1.29-3.el7 |
mariadb104SUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS |
before 10.4.30-150100.3.5.10 | 10.4.30-150100.3.5.10 |
python-mysqlclientSUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS |
before 1.4.6-150100.3.3.7 | 1.4.6-150100.3.3.7 |
mariadb104SUSE:Linux Enterprise Server 15 SP1-LTSS |
before 10.4.30-150100.3.5.10 | 10.4.30-150100.3.5.10 |
python-mysqlclientSUSE:Linux Enterprise Server 15 SP1-LTSS |
before 1.4.6-150100.3.3.7 | 1.4.6-150100.3.3.7 |
mariadb104SUSE:Linux Enterprise Server for SAP Applications 15 SP1 |
before 10.4.30-150100.3.5.10 | 10.4.30-150100.3.5.10 |
python-mysqlclientSUSE:Linux Enterprise Server for SAP Applications 15 SP1 |
before 1.4.6-150100.3.3.7 | 1.4.6-150100.3.3.7 |
lz4SUSE:Linux Enterprise Software Development Kit 12 SP5 |
before 1.8.0-3.5.2 | 1.8.0-3.5.2 |
mariadb-connector-cSUSE:Linux Enterprise Software Development Kit 12 SP5 |
before 3.1.22-2.35.1 | 3.1.22-2.35.1 |
mariadb104SUSE:Linux Enterprise Software Development Kit 12 SP5 |
before 10.4.30-8.5.46 | 10.4.30-8.5.46 |
python-mysqlclientSUSE:Linux Enterprise Software Development Kit 12 SP5 |
before 1.3.14-8.9.2 | 1.3.14-8.9.2 |
lz4SUSE:Linux Enterprise Server 12 SP5 |
before 1.8.0-3.5.2 | 1.8.0-3.5.2 |
mariadb-connector-cSUSE:Linux Enterprise Server 12 SP5 |
before 3.1.22-2.35.1 | 3.1.22-2.35.1 |
mariadb104SUSE:Linux Enterprise Server 12 SP5 |
before 10.4.30-8.5.46 | 10.4.30-8.5.46 |
python-mysqlclientSUSE:Linux Enterprise Server 12 SP5 |
before 1.3.14-8.9.2 | 1.3.14-8.9.2 |
lz4SUSE:Linux Enterprise Server for SAP Applications 12 SP5 |
before 1.8.0-3.5.2 | 1.8.0-3.5.2 |
mariadb-connector-cSUSE:Linux Enterprise Server for SAP Applications 12 SP5 |
before 3.1.22-2.35.1 | 3.1.22-2.35.1 |
mariadb104SUSE:Linux Enterprise Server for SAP Applications 12 SP5 |
before 10.4.30-8.5.46 | 10.4.30-8.5.46 |
python-mysqlclientSUSE:Linux Enterprise Server for SAP Applications 12 SP5 |
before 1.3.14-8.9.2 | 1.3.14-8.9.2 |
mariadbSUSE:Linux Enterprise Server for SAP Applications 12 |
before 10.0.29-20.23.1 | 10.0.29-20.23.1 |
mariadbSUSE:Linux Enterprise Server 12-LTSS |
before 10.0.29-20.23.1 | 10.0.29-20.23.1 |
mariadbSUSE:Linux Enterprise Desktop 12 SP1 |
before 10.0.29-22.1 | 10.0.29-22.1 |
mariadbSUSE:Linux Enterprise Desktop 12 SP2 |
before 10.0.29-22.1 | 10.0.29-22.1 |
mariadbSUSE:Linux Enterprise Server for Raspberry Pi 12 SP2 |
before 10.0.29-22.1 | 10.0.29-22.1 |
mariadbSUSE:Linux Enterprise Software Development Kit 12 SP1 |
before 10.0.29-22.1 | 10.0.29-22.1 |
mariadbSUSE:Linux Enterprise Software Development Kit 12 SP2 |
before 10.0.29-22.1 | 10.0.29-22.1 |
mariadbSUSE:Linux Enterprise Server 12 SP1 |
before 10.0.29-22.1 | 10.0.29-22.1 |
mariadbSUSE:Linux Enterprise Server for SAP Applications 12 SP1 |
before 10.0.29-22.1 | 10.0.29-22.1 |
mariadbSUSE:Linux Enterprise Server 12 SP2 |
before 10.0.29-22.1 | 10.0.29-22.1 |
mariadbSUSE:Linux Enterprise Server for SAP Applications 12 SP2 |
before 10.0.29-22.1 | 10.0.29-22.1 |
mariadbSUSE:Linux Enterprise Workstation Extension 12 SP1 |
before 10.0.29-22.1 | 10.0.29-22.1 |
mariadbSUSE:Linux Enterprise Workstation Extension 12 SP2 |
before 10.0.29-22.1 | 10.0.29-22.1 |
mysql-5.5Ubuntu:14.04:LTS |
before 5.5.52-0ubuntu0.14.04.1, plus listed versions 5.5.32-0ubuntu75.5.34-0ubuntu15.5.34-0ubuntu25.5.35-0ubuntu15.5.35+dfsg-1ubuntu1 Show 10 moreShow less5.5.37-0ubuntu0.14.04.15.5.38-0ubuntu0.14.04.15.5.40-0ubuntu0.14.04.15.5.41-0ubuntu0.14.04.15.5.43-0ubuntu0.14.04.15.5.44-0ubuntu0.14.04.15.5.46-0ubuntu0.14.04.25.5.47-0ubuntu0.14.04.15.5.49-0ubuntu0.14.04.15.5.50-0ubuntu0.14.04.1 |
5.5.52-0ubuntu0.14.04.1 |
mariadb-10.0Ubuntu:16.04:LTS |
before 10.0.29-0ubuntu0.16.04.1, plus listed versions 10.0.20-0ubuntu0.15.04.110.0.22-0ubuntu110.0.23-110.0.23-210.0.24-710.0.25-0ubuntu0.16.04.110.0.27-0ubuntu0.16.04.110.0.28-0ubuntu0.16.04.1 |
10.0.29-0ubuntu0.16.04.1 |
mariadbopenSUSE:Tumbleweed |
before 10.6.4-2.1 | 10.6.4-2.1 |
Public exploits
Links only. Every CVE stores no exploit code.
| Source | Link | Date |
|---|---|---|
| Exploit-DB | MySQL / MariaDB / PerconaDB 5.5.x/5.6.x/5.7.x - 'root' System User Privilege Escalation | 2016-11-01 |
History
| When | Changed | Sources |
|---|---|---|
| 2026-11-03 | aliases | EUVD |
| 2026-11-02 | created | CVE List, Exploit-DB, GitHub Advisories, NVD, OSV |
References
rhn.redhat.com/errata/RHSA-2016-2749.html
seclists.org/fulldisclosure/2016/Nov/4
securityfocus.com/bid/93612
percona.com/blog/2016/11/02/percona-responds-to-cve-2016-6663-and-cve-2016-6664
access.redhat.com/errata/RHSA-2018:0574
security.gentoo.org/glsa/201702-18
Show 194 moreShow less
oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html
packetstormsecurity.com/files/139491/MySQL-MariaDB-PerconaDB-Root-Privilege-Escalation.html
exploit-db.com/exploits/40679
legalhackers.com/advisories/MySQL-Maria-Percona-RootPrivEsc-CVE-2016-6664-5617-Exploit.html
debian.org/security/2017/dsa-3770
nvd.nist.gov/vuln/detail/CVE-2016-6664
github.com/advisories/GHSA-f9x4-3x96-w2vf
security.alpinelinux.org/vuln/CVE-2016-6664
docs.bell-sw.com/security/cves/CVE-2016-6664
advisories.mageia.org/MGASA-2017-0054.html
bugs.mageia.org/show_bug.cgi?id=20139
mariadb.com/kb/en/mariadb/mariadb-10029-release-notes
lists.opensuse.org/opensuse-updates/2017-02/msg00074.html
dev.mysql.com/doc/relnotes/mysql/5.5/en/news-5-5-51.html
bugzilla.redhat.com/show_bug.cgi?id=1375198
security.access.redhat.com/data/csaf/v2/advisories/2016/rhsa-2016_2130.json
cve.org/CVERecord?id=CVE-2016-3492
blog.tarq.io/cve-2016-5483-backdooring-mysqldump-backups
suse.com/support/update/announcement/-2023-3956/suse-ru-20233956-1
bugzilla.suse.com/1001367
ubuntu.com/security/CVE-2016-6664
Left out here: 450 references. The JSON record has them.