CVE-2016-6663: Race Condition
Race condition in Oracle MySQL before 5.5.52, 5.6.x before 5.6.33, 5.7.x before 5.7.15, and 8.x before 8.0.1; MariaDB before 5.5.52, 10.0.x before 10.0.28, and 10.1.x before 10.1.18; Percona Server before 5.5.51-38.2, 5.6.x before 5.6.32-78-1, and 5.7.x before 5.7.14-8; and Percona XtraDB Cluster before 5.5.41-37.0, 5.6.x before 5.6.32-25.17, and 5.7.x before 5.7.14-26.17 allows local users with certain permissions to gain privileges by leveraging use of mycopystat by REPAIR TABLE to repair a MyISAM table.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2016-6663?
CVE-2016-6663 has been assigned a medium severity level due to its potential impact on system integrity.
How do I fix CVE-2016-6663?
To fix CVE-2016-6663, upgrade MySQL to versions 5.5.52, 5.6.33, 5.7.15, or 8.0.1, or apply the relevant patches.
Which versions are affected by CVE-2016-6663?
CVE-2016-6663 affects multiple MySQL versions, including 5.5 before 5.5.52, 5.6 before 5.6.33, and various versions of MariaDB and Percona Server.
What are the potential impacts of CVE-2016-6663?
The potential impacts of CVE-2016-6663 include data corruption and inconsistent database operations due to a race condition.
Is there a workaround for CVE-2016-6663?
There are no known effective workarounds for CVE-2016-6663, so it is recommended to apply patches or upgrade to safer versions.