CVE-2016-6664

mysql: insecure error log file handling in mysqld_safe (CPU Oct 2016)

Loading…

Severity

Moderate

Red Hat Product Security

7.8

CVSS 3.0

Review impact separately from score.

Published · October 19, 2016

Updated · June 28, 2026

Description

A flaw was found in the way the mysqld_safe script handled creation of error log file. The mysql operating system user could use this flaw to escalate their privileges to root.

CVSS score applicability

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation

No mitigation is specified in collected source.

CVSS / CWE

CVSS 3.0 · 7.8
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CVSS 2.0 · 6.8
AV:L/AC:L/Au:S/C:C/I:C/A:C

CWE not specified