Описание
A race condition was found in the way MySQL performed MyISAM engine table repair. A database user with shell access to the server running mysqld could use this flaw to change permissions of arbitrary files writable by the mysql system user.
Затронутые пакеты
| Платформа | Пакет | Состояние | Рекомендация | Релиз |
|---|---|---|---|---|
| Red Hat Enterprise Linux 5 | mysql | Will not fix | ||
| Red Hat Enterprise Linux 5 | mysql55-mysql | Will not fix | ||
| Red Hat Enterprise Linux OpenStack Platform 5 (Icehouse) | mariadb-galera | Will not fix | ||
| Red Hat Enterprise Linux OpenStack Platform 6 (Juno) | mariadb-galera | Will not fix | ||
| Red Hat Enterprise Linux OpenStack Platform 7 (Kilo) | mariadb-galera | Will not fix | ||
| Red Hat Mobile Application Platform 4 | millicore | Under investigation | ||
| Red Hat OpenStack Platform 10 (Newton) | mariadb-galera | Will not fix | ||
| Red Hat OpenStack Platform 11 (Ocata) | mariadb-galera | Will not fix | ||
| Red Hat OpenStack Platform 12 (Pike) | mariadb-galera | Will not fix | ||
| Red Hat OpenStack Platform 8 (Liberty) | mariadb-galera | Will not fix |
Показывать по
Дополнительная информация
Статус:
7 High
CVSS3
3.5 Low
CVSS2
Связанные уязвимости
Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2016-6663. Reason: This candidate is a reservation duplicate of CVE-2016-6663. Notes: All CVE users should reference CVE-2016-6663 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage
Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2016-6663. Reason: This candidate is a reservation duplicate of CVE-2016-6663. Notes: All CVE users should reference CVE-2016-6663 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage
7 High
CVSS3
3.5 Low
CVSS2