CVE-2016-6662

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2016-6662
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2016-6662.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2016-6662
Downstream
Related
Published
2016-09-20T18:59:00.127Z
Modified
2026-03-15T22:50:25.681375Z
Severity
  • 9.8 (Critical) CVSS_V3 - CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CVSS Calculator
Summary
[none]
Details

Oracle MySQL through 5.5.52, 5.6.x through 5.6.33, and 5.7.x through 5.7.15; MariaDB before 5.5.51, 10.0.x before 10.0.27, and 10.1.x before 10.1.17; and Percona Server before 5.5.51-38.1, 5.6.x before 5.6.32-78.0, and 5.7.x before 5.7.14-7 allow local users to create arbitrary configurations and bypass certain protection mechanisms by setting generallogfile to a my.cnf configuration. NOTE: this can be leveraged to execute arbitrary code with root privileges by setting malloc_lib. NOTE: the affected MySQL version information is from Oracle's October 2016 CPU. Oracle has not commented on third-party claims that the issue was silently patched in MySQL 5.5.52, 5.6.33, and 5.7.15.

References

Affected packages

Git / github.com/mariadb/server

Affected ranges

Type
GIT
Repo
https://github.com/mariadb/server
Events
Introduced
776555af021e917ce0d6235386b43ae59fdd5161
Fixed
16702ec95f301d1a21eb5a6f5531387c9254b952
Introduced
c235de12ae3723b96944337bd89ad9cc87f21d8f
Fixed
a02642b66e06f95b80fa9ee592ba50eb61dc2f17
Database specific 
{
    "versions": [
        {
            "introduced": "10.0.0"
        },
        {
            "fixed": "10.0.27"
        },
        {
            "introduced": "10.1.0"
        },
        {
            "fixed": "10.1.17"
        }
    ]
}
Type
GIT
Repo
https://github.com/mysql/mysql-server
Events
Introduced
54df0057e18d8c82c23fbd4e0bf5b5dc2e762955
Last affected
754e7eff2872995e2b6e62f9da7448587a411c7b
Introduced
863a73b80b83801a14b416006e64cf892837a657
Fixed
7d57772f47e0d69b2e2a7bcd62da59e54f8c8343
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
270fd3411e3d671a73ed9725940a30080f59ce6d
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
f9e2c6cd27268e72198bde3c1a71eb1273df335a
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
a5893933ee2698c632e14b06195a4c7883d4dcf7
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
a5893933ee2698c632e14b06195a4c7883d4dcf7
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
ae41ce7c4ecff5e1e336ab768867370b8c94e02d
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
a5893933ee2698c632e14b06195a4c7883d4dcf7
Database specific 
{
    "versions": [
        {
            "introduced": "5.5.0"
        },
        {
            "last_affected": "5.5.52"
        },
        {
            "introduced": "5.5.20"
        },
        {
            "fixed": "5.5.51"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "8.0"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "5.0"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "7.3"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "7.3"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "7.5"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "7.3"
        }
    ]
}
Type
GIT
Repo
https://github.com/percona/percona-server
Events
Introduced
a9b6f76ed46972bf8a63e8ec2c642239f1e2d577
Last affected
2084bdb204cd443b9b9bec30b9695fa70e79175a
Introduced
ba312212c98fb993434cc7420950102ecca7793d
Fixed
b4a63b480bc048f8dbf053e52e3986d9965e47aa
Database specific 
{
    "versions": [
        {
            "introduced": "5.6.0"
        },
        {
            "last_affected": "5.6.33"
        },
        {
            "introduced": "5.5"
        },
        {
            "fixed": "5.5.51-38.1"
        }
    ]
}

Affected versions

11.*
11.0
11.1
11.2
11.3
12.*
12.0
12.4
Percona-Server-5.*
Percona-Server-5.1.45
Percona-Server-5.1.46
Percona-Server-5.1.46-11
Percona-Server-5.1.47-11
Percona-Server-5.1.48-12
Percona-Server-5.1.49-11
Percona-Server-5.1.49-12
Percona-Server-5.1.50-12
Percona-Server-5.1.51-12
Percona-Server-5.1.52-12
Percona-Server-5.1.53
Percona-Server-5.1.53-12
Percona-Server-5.1.54-12
Percona-Server-5.1.55
Percona-Server-5.1.56-12.7
Percona-Server-5.1.57-12.8
Percona-Server-5.1.58-12.9
Percona-Server-5.1.59-13.0
Percona-Server-5.1.60-13.1
Percona-Server-5.1.61-13.2
Percona-Server-5.1.62-13.3
Percona-Server-5.1.63-13.4
Percona-Server-5.1.65-14.0
Percona-Server-5.1.66-14.1
Percona-Server-5.1.66-14.2
Percona-Server-5.1.67-14.3
Percona-Server-5.1.67-14.4
Percona-Server-5.1.68-14.5
Percona-Server-5.1.68-14.6
Percona-Server-5.1.69-14.7
Percona-Server-5.1.70-14.8
Percona-Server-5.1.71-14.9
Percona-Server-5.1.72-14.10
Percona-Server-5.1.73-14.11
Percona-Server-5.1.73-14.12
Percona-Server-5.5.10-20.1
Percona-Server-5.5.11-20.2
Percona-Server-5.5.12-20.3
Percona-Server-5.5.13-20.4
Percona-Server-5.5.14-20.5
Percona-Server-5.5.15-21.0
Percona-Server-5.5.16-22.0
Percona-Server-5.5.18-23.0
Percona-Server-5.5.19-24.0
Percona-Server-5.5.20-24.1
Percona-Server-5.5.21-25.0
Percona-Server-5.5.21-25.1
Percona-Server-5.5.22-25.2
Percona-Server-5.5.23-25.3
Percona-Server-5.5.24-26.0
Percona-Server-5.5.25a-27.1
Percona-Server-5.5.27-28.0
Percona-Server-5.5.27-28.1
Percona-Server-5.5.27-29.0
Percona-Server-5.5.28-29.1
Percona-Server-5.5.28-29.2
Percona-Server-5.5.28-29.3
Percona-Server-5.5.28-29.4
Percona-Server-5.5.29-30.0
Percona-Server-5.5.30-30.1
Percona-Server-5.5.30-30.2
Percona-Server-5.5.31-30.3
Percona-Server-5.5.32-31.0
Percona-Server-5.5.33-31.1
Percona-Server-5.5.34-32.0
Percona-Server-5.5.35-33.0
Percona-Server-5.5.36-34.0
Percona-Server-5.5.36-34.1
Percona-Server-5.5.36-34.2
Percona-Server-5.5.37-35.0
Percona-Server-5.5.37-35.1
Percona-Server-5.5.38-35.2
Percona-Server-5.5.39-36.0
Percona-Server-5.5.40-36.1
Percona-Server-5.5.41-37.0
Percona-Server-5.5.42-37.1
Percona-Server-5.5.43-37.2
Percona-Server-5.5.44-37.3
Percona-Server-5.5.45-37.4
Percona-Server-5.5.46-37.5
Percona-Server-5.5.46-37.6
Percona-Server-5.5.47-37.7
Percona-Server-5.5.48-37.8
Percona-Server-5.5.49-37.9
Percona-Server-5.5.50-38.0
Percona-Server-5.5.7-rc-pre-port
Percona-Server-5.5.8-20
Percona-Server-5.5.9-20.1
Other
bug11766631-base
percona-pam-plugin-preview
clone-5.*
clone-5.0.92-build
clone-5.0.93-build
clone-5.0.94-build
clone-5.0.95-build
clone-5.0.96-build
clone-5.1.50-build
clone-5.1.51-build
clone-5.1.52-build
clone-5.1.53-build
clone-5.1.54-build
clone-5.1.55-build
clone-5.1.56-build
clone-5.1.57-build
clone-5.1.58-build
clone-5.1.59-build
clone-5.1.60-build
clone-5.1.61-build
clone-5.1.62-build
clone-5.1.63-build
clone-5.1.64-build
clone-5.1.65-build
clone-5.1.66-build
clone-5.1.67-build
clone-5.1.68-build
clone-5.1.69-build
clone-5.1.70-build
clone-5.1.71-build
clone-5.1.72-build
clone-5.1.73-build
clone-5.5.10-build
clone-5.5.11-build
clone-5.5.12-build
clone-5.5.13-build
clone-5.5.14-build
clone-5.5.15-build
clone-5.5.17-build
clone-5.5.18-build
clone-5.5.19-build
clone-5.5.20-build
clone-5.5.21-build
clone-5.5.22-build
clone-5.5.23-build
clone-5.5.24-build
clone-5.5.25-build
clone-5.5.26-build
clone-5.5.27-build
clone-5.5.28-build
clone-5.5.29-build
clone-5.5.30-build
clone-5.5.31-build
clone-5.5.32-build
clone-5.5.33-build
clone-5.5.34-build
clone-5.5.35-build
clone-5.5.36-build
clone-5.5.37-build
clone-5.5.38-build
clone-5.5.39-build
clone-5.5.40-build
clone-5.5.41-build
clone-5.5.6-m3-build
clone-5.5.7-rc-build
clone-5.5.8-build
clone-5.5.9-build
clone-5.6.0-m4-build
last-PS-5.*
last-PS-5.5-as-patches
mariadb-10.*
mariadb-10.0.13
mariadb-10.0.14
mariadb-10.0.15
mariadb-10.0.16
mariadb-10.0.17
mariadb-10.0.18
mariadb-10.0.19
mariadb-10.0.20
mariadb-10.0.21
mariadb-10.0.22
mariadb-10.0.23
mariadb-10.0.24
mariadb-10.0.25
mariadb-10.0.26
mariadb-10.0.27
mariadb-10.1.0
mariadb-5.*
mariadb-5.5.39
mariadb-5.5.40
mariadb-5.5.41
mariadb-5.5.42
mariadb-5.5.43
mariadb-5.5.44
mariadb-5.5.45
mariadb-5.5.46
mariadb-5.5.47
mariadb-5.5.48
mariadb-5.5.49
mariadb-5.5.50
mariadb-5.5.51
mariadb-galera-10.*
mariadb-galera-10.0.10
mariadb-galera-10.0.11
mariadb-galera-10.0.12
mariadb-galera-10.0.13
mariadb-galera-10.0.14
mariadb-galera-10.0.15
mariadb-galera-10.0.16
mariadb-galera-10.0.17
mariadb-galera-10.0.19
mariadb-galera-10.0.20
mariadb-galera-10.0.21
mariadb-galera-10.0.22
mariadb-galera-10.0.23
mariadb-galera-10.0.24
mariadb-galera-10.0.25
mariadb-galera-10.0.26
mariadb-galera-10.0.7
mariadb-galera-10.0.7a
mariadb-galera-5.*
mariadb-galera-5.5.25
mariadb-galera-5.5.28a
mariadb-galera-5.5.29
mariadb-galera-5.5.32
mariadb-galera-5.5.32a
mariadb-galera-5.5.34
mariadb-galera-5.5.35
mariadb-galera-5.5.36
mariadb-galera-5.5.36a
mariadb-galera-5.5.37
mariadb-galera-5.5.38
mariadb-galera-5.5.39
mariadb-galera-5.5.40
mariadb-galera-5.5.41
mariadb-galera-5.5.42
mariadb-galera-5.5.43
mariadb-galera-5.5.44
mariadb-galera-5.5.45
mariadb-galera-5.5.46
mariadb-galera-5.5.47
mariadb-galera-5.5.48
mariadb-galera-5.5.49
mariadb-galera-5.5.50
mariadb-galera-5.5.51
mysql-5.*
mysql-5.0.87sp1
mysql-5.0.90
mysql-5.0.91
mysql-5.0.92
mysql-5.0.93
mysql-5.0.94
mysql-5.0.95
mysql-5.0.96
mysql-5.1.40sp1
mysql-5.1.41
mysql-5.1.42
mysql-5.1.43
mysql-5.1.43sp1
mysql-5.1.44
mysql-5.1.45
mysql-5.1.46
mysql-5.1.46sp1
mysql-5.1.47
mysql-5.1.48
mysql-5.1.49
mysql-5.1.49sp1
mysql-5.1.50
mysql-5.1.51
mysql-5.1.52
mysql-5.1.52sp1
mysql-5.1.53
mysql-5.1.54
mysql-5.1.55
mysql-5.1.56
mysql-5.1.57
mysql-5.1.58
mysql-5.1.59
mysql-5.1.60
mysql-5.1.61
mysql-5.1.62
mysql-5.1.63
mysql-5.1.65
mysql-5.1.65-imported-tarball
mysql-5.1.66
mysql-5.1.67
mysql-5.1.68
mysql-5.1.69
mysql-5.1.69-retag
mysql-5.1.70
mysql-5.1.71
mysql-5.1.72
mysql-5.1.73
mysql-5.1.74
mysql-5.1.75
mysql-5.1.76
mysql-5.1.77
mysql-5.5.0
mysql-5.5.1-m2
mysql-5.5.10
mysql-5.5.11
mysql-5.5.12
mysql-5.5.13
mysql-5.5.14
mysql-5.5.15
mysql-5.5.16
mysql-5.5.17
mysql-5.5.18
mysql-5.5.19
mysql-5.5.2-m2
mysql-5.5.20
mysql-5.5.21
mysql-5.5.22
mysql-5.5.23
mysql-5.5.24
mysql-5.5.25
mysql-5.5.25a
mysql-5.5.27
mysql-5.5.28
mysql-5.5.29
mysql-5.5.3-m3
mysql-5.5.30
mysql-5.5.31
mysql-5.5.32
mysql-5.5.33
mysql-5.5.34
mysql-5.5.35
mysql-5.5.36
mysql-5.5.37
mysql-5.5.38
mysql-5.5.39
mysql-5.5.40
mysql-5.5.41
mysql-5.5.42
mysql-5.5.43
mysql-5.5.44
mysql-5.5.45
mysql-5.5.46
mysql-5.5.47
mysql-5.5.48
mysql-5.5.49
mysql-5.5.5-m3
mysql-5.5.50
mysql-5.5.51
mysql-5.5.6-rc
mysql-5.5.7
mysql-5.5.8
mysql-5.5.9

Database specific

vanir_signatures 
[
    {
        "digest": {
            "threshold": 0.9,
            "line_hashes": [
                "284474919473169016970406210133607862503",
                "56620395527721358171084621192052395955",
                "155751907007791503660291135721680547973",
                "284464292980216230235061452928340542994"
            ]
        },
        "signature_version": "v1",
        "deprecated": false,
        "signature_type": "Line",
        "id": "CVE-2016-6662-16d79c87",
        "target": {
            "file": "sql/item_sum.cc"
        },
        "source": "https://github.com/mariadb/server/commit/a02642b66e06f95b80fa9ee592ba50eb61dc2f17"
    },
    {
        "digest": {
            "length": 1113.0,
            "function_hash": "260358408969056573440033318428069010350"
        },
        "signature_version": "v1",
        "deprecated": false,
        "signature_type": "Function",
        "id": "CVE-2016-6662-4f786aaf",
        "target": {
            "function": "Item_sum::register_sum_func",
            "file": "sql/item_sum.cc"
        },
        "source": "https://github.com/mariadb/server/commit/a02642b66e06f95b80fa9ee592ba50eb61dc2f17"
    }
]
unresolved_ranges 
[
    {
        "events": [
            {
                "introduced": "5.7.0"
            },
            {
                "last_affected": "5.7.15"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "5.6"
            },
            {
                "fixed": "5.6.32-78.0"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "5.7"
            },
            {
                "fixed": "5.7.14-7"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "6.0"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "7.0"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "8"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "9"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "7.0"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "6.0"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "7.0"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "6.0"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "7.4"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "7.6"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "7.4"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "7.6"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "7.6"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "6.0"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "7.0"
            }
        ]
    }
]
source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2016-6662.json"