High severity7.8NVD Advisory· Published Oct 27, 2017· Updated Jun 17, 2026

CVE-2017-15945

Description

The installation scripts in the Gentoo dev-db/mysql, dev-db/mariadb, dev-db/percona-server, dev-db/mysql-cluster, and dev-db/mariadb-galera packages before 2017-09-29 have chown calls for user-writable directory trees, which allows local users to gain privileges by leveraging access to the mysql account for creation of a link.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

MariaDB/MariaDB
cpe:2.3:a:mariadb:mariadb:*:r1:*:*:*:*:*:*
Range: <10.0.30
MySQL/MySQL
cpe:2.3:a:mysql:mysql:*:r1:*:*:*:*:*:*
Range: <5.6.36
File Project/dev-db/mysqlllm-create
Range: <2017-09-29
File Project/dev-db/mariadbllm-create
Range: <2017-09-29
File Project/dev-db/percona-serverllm-create
Range: <2017-09-29

Patches

Vulnerability mechanics

References

bugs.gentoo.org/630822nvdIssue TrackingThird Party Advisory
security.gentoo.org/glsa/201711-04nvdIssue TrackingThird Party Advisory

News mentions

No linked articles in our index yet.

cvss	0.507
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000