Oracle MySQL through 5.5.52, 5.6.x through 5.6.33, and 5.7.x through 5.7.15; MariaDB before 5.5.51, 10.0.x before 10.0.27, and 10.1.x before 10.1.17; and Percona Server before 5.5.51-38.1, 5.6.x before 5.6.32-78.0, and 5.7.x before 5.7.14-7 allow local users to create arbitrary configurations and bypass certain protection mechanisms by setting generallogfile to a my.cnf configuration. NOTE: this can be leveraged to execute arbitrary code with root privileges by setting malloc_lib. NOTE: the affected MySQL version information is from Oracle's October 2016 CPU. Oracle has not commented on third-party claims that the issue was silently patched in MySQL 5.5.52, 5.6.33, and 5.7.15.
[
{
"digest": {
"threshold": 0.9,
"line_hashes": [
"284474919473169016970406210133607862503",
"56620395527721358171084621192052395955",
"155751907007791503660291135721680547973",
"284464292980216230235061452928340542994"
]
},
"source": "https://github.com/mariadb/server/commit/a02642b66e06f95b80fa9ee592ba50eb61dc2f17",
"deprecated": false,
"id": "CVE-2016-6662-16d79c87",
"signature_type": "Line",
"target": {
"file": "sql/item_sum.cc"
},
"signature_version": "v1"
},
{
"digest": {
"threshold": 0.9,
"line_hashes": [
"40450088112621778246978180448552546881",
"232003334261718423048584720009659080461",
"129222370326372743768915563764041584801",
"304289411389478217654701610663321994812",
"198037888538599178759089031586446561444",
"237593277201271758213174746635947055814",
"284984164845047604329757645667343090129",
"249861449876706797086152486203285407483"
]
},
"source": "https://github.com/mariadb/server/commit/5ad02062d928cccbd29c0a2db6f0f7ceb33195d1",
"deprecated": false,
"id": "CVE-2016-6662-46506dfb",
"signature_type": "Line",
"target": {
"file": "storage/xtradb/include/os0sync.h"
},
"signature_version": "v1"
},
{
"digest": {
"length": 1113.0,
"function_hash": "260358408969056573440033318428069010350"
},
"source": "https://github.com/mariadb/server/commit/a02642b66e06f95b80fa9ee592ba50eb61dc2f17",
"deprecated": false,
"id": "CVE-2016-6662-4f786aaf",
"signature_type": "Function",
"target": {
"function": "Item_sum::register_sum_func",
"file": "sql/item_sum.cc"
},
"signature_version": "v1"
},
{
"digest": {
"threshold": 0.9,
"line_hashes": [
"40450088112621778246978180448552546881",
"232003334261718423048584720009659080461",
"129222370326372743768915563764041584801",
"304289411389478217654701610663321994812",
"198037888538599178759089031586446561444",
"237593277201271758213174746635947055814",
"284984164845047604329757645667343090129",
"249861449876706797086152486203285407483"
]
},
"source": "https://github.com/mariadb/server/commit/5ad02062d928cccbd29c0a2db6f0f7ceb33195d1",
"deprecated": false,
"id": "CVE-2016-6662-a7dc7446",
"signature_type": "Line",
"target": {
"file": "storage/innobase/include/os0sync.h"
},
"signature_version": "v1"
}
]
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2016-6662.json"