Critical severity9.8NVD Advisory· Published Sep 20, 2016· Updated Jun 17, 2026

CVE-2016-6662

Description

Oracle MySQL through 5.5.52, 5.6.x through 5.6.33, and 5.7.x through 5.7.15; MariaDB before 5.5.51, 10.0.x before 10.0.27, and 10.1.x before 10.1.17; and Percona Server before 5.5.51-38.1, 5.6.x before 5.6.32-78.0, and 5.7.x before 5.7.14-7 allow local users to create arbitrary configurations and bypass certain protection mechanisms by setting general_log_file to a my.cnf configuration. NOTE: this can be leveraged to execute arbitrary code with root privileges by setting malloc_lib. NOTE: the affected MySQL version information is from Oracle's October 2016 CPU. Oracle has not commented on third-party claims that the issue was silently patched in MySQL 5.5.52, 5.6.33, and 5.7.15.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

MariaDB/MariaDB2 versions
cpe:2.3:a:mariadb:mariadb:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:mariadb:mariadb:*:*:*:*:*:*:*:*range: >=5.5.20,<5.5.51
- (no CPE)range: <5.5.51, <10.0.27, <10.1.17
Oracle Corporation/MySQL2 versions
cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*range: >=5.5.0,<=5.5.52
- (no CPE)range: <=5.5.52, <=5.6.33, <=5.7.15
Percona/Percona Server2 versions
cpe:2.3:a:percona:percona_server:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:percona:percona_server:*:*:*:*:*:*:*:*range: >=5.5,<5.5.51-38.1
- (no CPE)range: <5.5.51-38.1, <5.6.32-78.0, <5.7.14-7
Red Hat/Openstack5 versions
cpe:2.3:a:redhat:openstack:5.0:*:*:*:*:*:*:*+ 4 more
- cpe:2.3:a:redhat:openstack:5.0:*:*:*:*:*:*:*
- cpe:2.3:a:redhat:openstack:6.0:*:*:*:*:*:*:*
- cpe:2.3:a:redhat:openstack:7.0:*:*:*:*:*:*:*
- cpe:2.3:a:redhat:openstack:8:*:*:*:*:*:*:*
- cpe:2.3:a:redhat:openstack:9:*:*:*:*:*:*:*
Debian/linux
cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*
Red Hat/Enterprise Linux Server2 versions
cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:*
- cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*
Red Hat/Enterprise Linux Desktop2 versions
cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*
- cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*
Red Hat/Enterprise Linux Server Aus3 versions
cpe:2.3:o:redhat:enterprise_linux_server_aus:7.3:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:o:redhat:enterprise_linux_server_aus:7.3:*:*:*:*:*:*:*
- cpe:2.3:o:redhat:enterprise_linux_server_aus:7.4:*:*:*:*:*:*:*
- cpe:2.3:o:redhat:enterprise_linux_server_aus:7.6:*:*:*:*:*:*:*
Red Hat/Enterprise Linux Eus4 versions
cpe:2.3:o:redhat:enterprise_linux_server_eus:7.3:*:*:*:*:*:*:*+ 3 more
- cpe:2.3:o:redhat:enterprise_linux_server_eus:7.3:*:*:*:*:*:*:*
- cpe:2.3:o:redhat:enterprise_linux_server_eus:7.4:*:*:*:*:*:*:*
- cpe:2.3:o:redhat:enterprise_linux_server_eus:7.5:*:*:*:*:*:*:*
- cpe:2.3:o:redhat:enterprise_linux_server_eus:7.6:*:*:*:*:*:*:*
Red Hat/Enterprise Linux Server Tus2 versions
cpe:2.3:o:redhat:enterprise_linux_server_tus:7.3:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:o:redhat:enterprise_linux_server_tus:7.3:*:*:*:*:*:*:*
- cpe:2.3:o:redhat:enterprise_linux_server_tus:7.6:*:*:*:*:*:*:*
Red Hat/Enterprise Linux Workstation2 versions
cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*
- cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*
osv-coords34 versions
pkg:rpm/suse/lz4&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP5 pkg:rpm/suse/lz4&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP5 pkg:rpm/suse/lz4&distro=SUSE%20Linux%20Enterprise%20Software%20Development%20Kit%2012%20SP5 pkg:rpm/suse/mariadb104&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP1-LTSS pkg:rpm/suse/mariadb104&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP5 pkg:rpm/suse/mariadb104&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP1-LTSS pkg:rpm/suse/mariadb104&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP5 pkg:rpm/suse/mariadb104&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015%20SP1 pkg:rpm/suse/mariadb104&distro=SUSE%20Linux%20Enterprise%20Software%20Development%20Kit%2012%20SP5 pkg:rpm/suse/mariadb-connector-c&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP5 pkg:rpm/suse/mariadb-connector-c&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP5 pkg:rpm/suse/mariadb-connector-c&distro=SUSE%20Linux%20Enterprise%20Software%20Development%20Kit%2012%20SP5 pkg:rpm/suse/mariadb&distro=SUSE%20Linux%20Enterprise%20Desktop%2012%20SP1 pkg:rpm/suse/mariadb&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP1 pkg:rpm/suse/mariadb&distro=SUSE%20Linux%20Enterprise%20Server%2012-LTSS pkg:rpm/suse/mariadb&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012 pkg:rpm/suse/mariadb&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP1 pkg:rpm/suse/mariadb&distro=SUSE%20Linux%20Enterprise%20Software%20Development%20Kit%2012%20SP1 pkg:rpm/suse/mariadb&distro=SUSE%20Linux%20Enterprise%20Workstation%20Extension%2012%20SP1 pkg:rpm/suse/mysql&distro=SUSE%20Linux%20Enterprise%20Point%20of%20Sale%2011%20SP3 pkg:rpm/suse/mysql&distro=SUSE%20Linux%20Enterprise%20Server%2011%20SP3-LTSS pkg:rpm/suse/mysql&distro=SUSE%20Linux%20Enterprise%20Server%2011%20SP3-TERADATA pkg:rpm/suse/mysql&distro=SUSE%20Linux%20Enterprise%20Server%2011%20SP4 pkg:rpm/suse/mysql&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2011%20SP4 pkg:rpm/suse/mysql&distro=SUSE%20Linux%20Enterprise%20Software%20Development%20Kit%2011%20SP4 pkg:rpm/suse/mysql&distro=SUSE%20Manager%202.1 pkg:rpm/suse/mysql&distro=SUSE%20Manager%20Proxy%202.1 pkg:rpm/suse/mysql&distro=SUSE%20OpenStack%20Cloud%205 pkg:rpm/suse/python-mysqlclient&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP1-LTSS pkg:rpm/suse/python-mysqlclient&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP5 pkg:rpm/suse/python-mysqlclient&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP1-LTSS pkg:rpm/suse/python-mysqlclient&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP5 pkg:rpm/suse/python-mysqlclient&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015%20SP1 pkg:rpm/suse/python-mysqlclient&distro=SUSE%20Linux%20Enterprise%20Software%20Development%20Kit%2012%20SP5
< 1.8.0-3.5.2+ 33 more
- (no CPE)range: < 1.8.0-3.5.2
- (no CPE)range: < 1.8.0-3.5.2
- (no CPE)range: < 1.8.0-3.5.2
- (no CPE)range: < 10.4.30-150100.3.5.10
- (no CPE)range: < 10.4.30-8.5.46
- (no CPE)range: < 10.4.30-150100.3.5.10
- (no CPE)range: < 10.4.30-8.5.46
- (no CPE)range: < 10.4.30-150100.3.5.10
- (no CPE)range: < 10.4.30-8.5.46
- (no CPE)range: < 3.1.22-2.35.1
- (no CPE)range: < 3.1.22-2.35.1
- (no CPE)range: < 3.1.22-2.35.1
- (no CPE)range: < 10.0.27-12.1
- (no CPE)range: < 10.0.27-12.1
- (no CPE)range: < 10.0.27-20.13.1
- (no CPE)range: < 10.0.27-20.13.1
- (no CPE)range: < 10.0.27-12.1
- (no CPE)range: < 10.0.27-12.1
- (no CPE)range: < 10.0.27-12.1
- (no CPE)range: < 5.5.52-0.27.1
- (no CPE)range: < 5.5.52-0.27.1
- (no CPE)range: < 5.5.52-0.27.1
- (no CPE)range: < 5.5.52-0.27.1
- (no CPE)range: < 5.5.52-0.27.1
- (no CPE)range: < 5.5.52-0.27.1
- (no CPE)range: < 5.5.52-0.27.1
- (no CPE)range: < 5.5.52-0.27.1
- (no CPE)range: < 5.5.52-0.27.1
- (no CPE)range: < 1.4.6-150100.3.3.7
- (no CPE)range: < 1.3.14-8.9.2
- (no CPE)range: < 1.4.6-150100.3.3.7
- (no CPE)range: < 1.3.14-8.9.2
- (no CPE)range: < 1.4.6-150100.3.3.7
- (no CPE)range: < 1.3.14-8.9.2

Patches

Vulnerability mechanics

References

www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.htmlnvdPatchVendor Advisory
www.exploit-db.com/exploits/40360/nvdExploitThird Party AdvisoryVDB Entry
legalhackers.com/advisories/MySQL-Exploit-Remote-Root-Code-Execution-Privesc-CVE-2016-6662.htmlnvdThird Party Advisory
rhn.redhat.com/errata/RHSA-2016-2058.htmlnvdThird Party Advisory
rhn.redhat.com/errata/RHSA-2016-2059.htmlnvdThird Party Advisory
rhn.redhat.com/errata/RHSA-2016-2060.htmlnvdThird Party Advisory
rhn.redhat.com/errata/RHSA-2016-2061.htmlnvdThird Party Advisory
rhn.redhat.com/errata/RHSA-2016-2062.htmlnvdThird Party Advisory
rhn.redhat.com/errata/RHSA-2016-2077.htmlnvdThird Party Advisory
rhn.redhat.com/errata/RHSA-2016-2130.htmlnvdThird Party Advisory
rhn.redhat.com/errata/RHSA-2016-2131.htmlnvdThird Party Advisory
rhn.redhat.com/errata/RHSA-2016-2595.htmlnvdThird Party Advisory
rhn.redhat.com/errata/RHSA-2016-2749.htmlnvdThird Party Advisory
rhn.redhat.com/errata/RHSA-2016-2927.htmlnvdThird Party Advisory
rhn.redhat.com/errata/RHSA-2016-2928.htmlnvdThird Party Advisory
rhn.redhat.com/errata/RHSA-2017-0184.htmlnvdThird Party Advisory
seclists.org/fulldisclosure/2016/Sep/23nvdMailing ListThird Party Advisory
www.debian.org/security/2016/dsa-3666nvdThird Party Advisory
www.openwall.com/lists/oss-security/2016/09/12/3nvdMailing ListThird Party Advisory
www.securityfocus.com/bid/92912nvdThird Party AdvisoryVDB Entry
www.securitytracker.com/id/1036769nvdThird Party AdvisoryVDB Entry
jira.mariadb.org/browse/MDEV-10465nvdIssue TrackingVendor Advisory
mariadb.com/kb/en/mariadb/mariadb-10027-release-notes/nvdRelease NotesVendor Advisory
mariadb.com/kb/en/mariadb/mariadb-10117-release-notes/nvdRelease NotesVendor Advisory
mariadb.com/kb/en/mariadb/mariadb-5551-release-notes/nvdRelease NotesVendor Advisory
security.gentoo.org/glsa/201701-01nvdThird Party Advisory
www.percona.com/blog/2016/09/12/percona-server-critical-update-cve-2016-6662/nvdThird Party Advisory

News mentions

No linked articles in our index yet.

cvss	0.637
epss	0.054
exploit	0.030
kev	0.000
patch	0.000
ransomware	0.000