CVE-2016-6662

EPSS 67.7%

Vexday Risk Score

35Attention

SSVC decision (CISA)

Attend

PoC available → attend closely

CVSS —EPSS 67.7%KEV nãoPoC públicaNuclei —Metasploit —Patch referenciado

Lifecycle

12 Sep 2016Public PoC

20 Sep 2016Published on NVD

Recommendation: Plan a near-term fix — a public PoC already exists.

Who exploits it — 46

Groups known to exploit this vulnerability (MITRE ATT&CK attribution).

APT / StateAgriusIrã APT / StateAPT28Rússia APT / StateAPT29Rússia APT / StateAPT39Irã APT / StateAPT41China APT / StateAPT5China APT / StateAxiomChina APT / StateBackdoorDiplomacy APT / StateBlackByte APT / StateBlackTechChina APT / StateBlue Mockingbird APT / StateCinnamon TempestChina APT / StateDragonflyRússia APT / StateEarth LuscaChina APT / StateEmber BearRússia APT / StateFIN13 APT / StateFIN7 APT / StateFox KittenIrã APT / StateGALLIUMChina APT / StateGOLD SOUTHFIELD APT / StateHAFNIUMChina APT / StateINC Ransom APT / StateKe3changChina APT / StateKimsukyCoreia do Norte APT / StateLeviathanChina APT / StateMagic HoundIrã APT / StateMedusa Group APT / StatemenuPassChina APT / StateMirrorFaceChina APT / StateMoses StaffIrã APT / StateMuddyWaterIrã APT / StatePlay APT / StateRockeChina APT / StateSalt TyphoonChina APT / StateSandworm TeamRússia APT / StateSea Turtle APT / StateStorm-0501 APT / StateThreat Group-3390China APT / StateToddyCat APT / StateTonto TeamChina APT / StateUNC3886China APT / StateVOID MANTICOREIrã APT / StateVolatile Cedar APT / StateVolt TyphoonChina APT / StateWinter VivernRússia APT / StateWizard SpiderRússia

Oracle MySQL through 5.5.52, 5.6.x through 5.6.33, and 5.7.x through 5.7.15; MariaDB before 5.5.51, 10.0.x before 10.0.27, and 10.1.x before 10.1.17; and Percona Server before 5.5.51-38.1, 5.6.x before 5.6.32-78.0, and 5.7.x before 5.7.14-7 allow local users to create arbitrary configurations and bypass certain protection mechanisms by setting general_log_file to a my.cnf configuration. NOTE: this can be leveraged to execute arbitrary code with root privileges by setting malloc_lib. NOTE: the affected MySQL version information is from Oracle's October 2016 CPU. Oracle has not commented on third-party claims that the issue was silently patched in MySQL 5.5.52, 5.6.33, and 5.7.15.

Affected products

n/a · n/a

public PoCs found — 8

githubgithub.com/MAYASEVEN/CVE-2016-6662★ 29 githubgithub.com/Ashrafdev/MySQL-Remote-Root-Code-Execution★ 9 githubgithub.com/meersjo/ansible-mysql-cve-2016-6662★ 1 githubgithub.com/boompig/cve-2016-6662★ 1 githubgithub.com/konstantin-kelemen/mysqld_safe-CVE-2016-6662-patch★ 0 githubgithub.com/KosukeShimofuji/CVE-2016-6662★ 0 exploitdbwww.exploit-db.com/exploits/40360unverified cve_referencewww.exploit-db.com/exploits/40360/unverified

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References