Lucene search
GoogleOSV:CVE-2017-15365HistoryJan 25, 2018 - 4:29 p.m.
CVE-2017-15365
2018-01-2516:29:00
Google
osv.dev
18
sql/event_data_objects.cc in MariaDB before 10.1.30 and 10.2.x before 10.2.10 and Percona XtraDB Cluster before 5.6.37-26.21-3 and 5.7.x before 5.7.19-29.22-3 allows remote authenticated users with SQL access to bypass intended access restrictions and replicate data definition language (DDL) statements to cluster nodes by leveraging incorrect ordering of DDL replication and ACL checking.
References
access.redhat.com/errata/RHSA-2019:1258
bugzilla.redhat.com/show_bug.cgi?id=1524234
github.com/MariaDB/server/commit/0b5a5258abbeaf8a0c3a18c7e753699787fdf46e
lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ELCZV46WIYSJ6VMC65GMNN3A3QDRUJGK/
mariadb.com/kb/en/library/mariadb-10130-release-notes/
mariadb.com/kb/en/library/mariadb-10210-release-notes/
www.debian.org/security/2018/dsa-4341
www.percona.com/blog/2017/10/30/percona-xtradb-cluster-5-6-37-26-21-3-is-now-available/
www.percona.com/doc/percona-xtradb-cluster/LATEST/release-notes/Percona-XtraDB-Cluster-5.7.19-29.22-3.html
Related
openvas
openvas
MariaDB Access Bypass Vulnerability - Linux
2018-01-30 00:00:00
Mageia: Security Advisory (MGASA-2018-0088)
2022-01-28 00:00:00
Fedora Update for mariadb FEDORA-2018-0d6a80f496
2018-01-24 00:00:00
mageia
mageia
Updated mariadb packages fix security vulnerability
2018-01-20 02:12:00
prion
prion
Sql injection
2018-01-25 16:29:00
Design/Logic Flaw
2016-09-20 18:59:00
alpinelinux
alpinelinux
CVE-2017-15365
2018-01-25 16:29:00
CVE-2016-6662
2016-09-20 18:59:00
fedora
fedora
[SECURITY] Fedora 26 Update: mariadb-10.1.30-1.fc26
2018-01-23 21:21:21
[SECURITY] Fedora 24 Update: community-mysql-5.7.15-1.fc24
2016-09-27 03:57:17
[SECURITY] Fedora 23 Update: mariadb-10.0.27-1.fc23
2016-10-03 20:22:41
ubuntucve
ubuntucve
CVE-2017-15365
2018-01-25 00:00:00
CVE-2016-6662
2016-09-12 00:00:00
debiancve
debiancve
CVE-2017-15365
2018-01-25 16:29:00
cve
cve
CVE-2017-15365
2018-01-25 16:29:00
CVE-2016-6662
2016-09-20 18:59:00
nessus
nessus
Fedora 26 : 3:mariadb (2018-0d6a80f496)
2018-01-24 00:00:00
FreeBSD : MariaDB -- unspecified vulnerability (b7d89082-e7c0-11e7-ac58-b499baebfeaf)
2017-12-26 00:00:00
Fedora 23 : 1:mariadb (2016-58f90ae3cc)
2016-10-06 00:00:00
altlinux
altlinux
Security fix for the ALT Linux 8 package mariadb version 10.1.30-alt1
2018-01-09 00:00:00
nvd
nvd
CVE-2017-15365
2018-01-25 16:29:00
CVE-2016-6662
2016-09-20 18:59:00
cvelist
cvelist
CVE-2017-15365
2018-01-25 16:00:00
CVE-2016-6662
2016-09-20 18:00:00
freebsd
freebsd
MariaDB -- unspecified vulnerability
2017-12-23 00:00:00
Remote-Code-Execution vulnerability in mysql and its variants CVE 2016-6662
2016-09-12 00:00:00
mysql -- Remote Root Code Execution
2016-09-12 00:00:00
redhatcve
redhatcve
CVE-2017-15365
2019-10-08 12:09:47
CVE-2016-6662
2016-12-15 20:18:44
mariadbunix
mariadbunix
CVE-2017-15365
2018-01-25 16:29:00
CVE-2016-6662
2016-09-20 18:59:00
veracode
veracode
Access Restriction Bypass
2019-05-27 00:40:09
Arbitrary Code Execution
2019-01-15 09:13:35
f5
f5
SOL72255110 - MySQL vulnerability CVE-2016-6662
2016-09-26 00:00:00
K72255110 : MySQL vulnerability CVE-2016-6662
2016-09-26 00:00:00
redhat
redhat
(RHSA-2016:2060) Important: mariadb-galera security and bug fix update
2016-10-13 05:07:39
(RHSA-2016:2059) Important: mariadb-galera security and bug fix update
2016-10-13 05:07:36
(RHSA-2016:2062) Important: mariadb-galera security update
2016-10-13 05:07:45
slackware
slackware
[slackware-security] mariadb / mysql
2016-09-13 20:15:07
osv
osv
mysql-5.5 - security update
2016-09-16 00:00:00
CVE-2020-10996
2020-04-27 13:15:12
CVE-2020-15180
2021-05-27 20:15:07
debian
debian
[SECURITY] [DLA 624-1] mysql-5.5 security update
2016-09-16 15:37:59
[SECURITY] [DSA 3666-1] mysql-5.5 security update
2016-09-14 15:13:34
[SECURITY] [DSA 3666-1] mysql-5.5 security update
2016-09-14 15:13:34
suse
suse
Security update for mariadb (important)
2016-09-27 21:12:05
Security update for mariadb (important)
2016-10-04 17:09:01
Security update for mariadb (important)
2016-09-27 19:14:25
ibm
ibm
Security Bulletin: IBM Security Guardium is affected by Open Source Oracle MySQL Vulnerabilities (CVE-2016-6662)
2018-06-16 21:47:55
Security Bulletin: MySQL 0-day exploit (CVE-2016-6662)
2018-12-08 04:55:34
Security Bulletin: Vulnerabilities in mariadb affect PowerKVM
2018-06-18 01:34:53
amazon
amazon
Important: mysql55, mysql56
2016-10-12 17:00:00
Important: mysql51
2017-02-22 18:00:00
cloudfoundry
cloudfoundry
CVE-2016-6662 - Multiple MySQL Vulnerabilities | Cloud Foundry
2016-09-28 00:00:00
ubuntu
ubuntu
MySQL vulnerability
2016-09-13 00:00:00
zdt
zdt
thn
thn
Why Database Patching Best Practice Just Doesn't Work and How to Fix It
2021-10-18 16:00:00
New MySQL Zero Days — Hacking Website Databases
2016-09-12 06:14:00
threatpost
threatpost
Critical MySQL Vulnerability Disclosed
2016-09-12 11:00:58
Critical MySQL Vulnerabilities Can Lead to Server Compromise
2016-11-02 14:02:10
exploitpack
exploitpack
archlinux
archlinux
mariadb: multiple issues
2016-09-14 00:00:00
exploitdb
exploitdb
checkpoint_advisories
checkpoint_advisories
MySQL Remote Code Execution (CVE-2016-6662; CVE-2016-6663; CVE-2016-6664)
2016-09-20 00:00:00
centos
centos
mysql security update
2017-01-26 22:35:43
mariadb security update
2016-11-25 16:00:08
oraclelinux
oraclelinux
mysql security update
2017-01-24 00:00:00
mariadb security and bug fix update
2016-11-09 00:00:00
mariadb security and bug fix update
2017-08-07 00:00:00
packetstorm
packetstorm
MySQL 5.7.15 / 5.6.33 / 5.5.52 Remote Code Execution
2016-09-12 00:00:00
MySQL / MariaDB / PerconaDB Privilege Escalation / Race Condition
2016-11-02 00:00:00
MySQL / MariaDB / PerconaDB Root Privilege Escalation
2016-11-02 00:00:00
seebug
seebug
MySQL <= 5.7.15 remote Root code execution vulnerability
2016-09-13 00:00:00
MySQL / MariaDB / PerconaDB 提权/条件竞争漏洞（CVE-2016-6663）
2016-11-02 00:00:00
rosalinux
rosalinux
Advisory ROSA-SA-2021-1914
2021-07-02 17:27:51
gentoo
gentoo
MariaDB and MySQL: Multiple vulnerabilities
2017-01-01 00:00:00
oracle
oracle
Oracle Critical Patch Update - October 2016
2016-10-18 00:00:00