CVE-2016-6662
59Vexday Risk Score
Priorize a correção. Ela exploração observada pelo VulnCheck, tem prova de conceito pública e 48 grupo(s) de ameaça a utilizam.
ssvc Actepss 68%
da publicação à arma0 dias
Publicada no NVD20 de set.
1ª PoC12 de set.
VulnCheck+2793d
probabilidade de exploração
68%top 1% das CVEs
exploração observada
simVulnCheck
48 grupo(s)11 exploit(s) público(s)
Quem explora — 48
Grupos conhecidos por explorar esta vulnerabilidade (atribuição MITRE ATT&CK).
APT / EstatalAgrius🇮🇷 MITRE ATT&CK
APT / EstatalAPT28🇷🇺 MITRE ATT&CK
APT / EstatalAPT29🇷🇺 MITRE ATT&CK
APT / EstatalAPT39🇮🇷 MITRE ATT&CK
APT / EstatalAPT41🇨🇳 MITRE ATT&CK
APT / EstatalAPT5🇨🇳 MITRE ATT&CK
APT / EstatalAxiom🇨🇳 MITRE ATT&CK
APT / EstatalBackdoorDiplomacy MITRE ATT&CK
APT / EstatalBlackByte MITRE ATT&CK
APT / EstatalBlackTech🇨🇳 MITRE ATT&CK
APT / EstatalBlue Mockingbird MITRE ATT&CK
APT / EstatalCinnamon Tempest🇨🇳 MITRE ATT&CK
APT / EstatalDragonfly🇷🇺 MITRE ATT&CK
APT / EstatalEarth Lusca🇨🇳 MITRE ATT&CK
APT / EstatalEmber Bear🇷🇺 MITRE ATT&CK
APT / EstatalFIN13 MITRE ATT&CK
APT / EstatalFIN7 MITRE ATT&CK
APT / EstatalFox Kitten🇮🇷 MITRE ATT&CK
APT / EstatalGALLIUM🇨🇳 MITRE ATT&CK
APT / EstatalGOLD SOUTHFIELD MITRE ATT&CK
APT / EstatalHAFNIUM🇨🇳 MITRE ATT&CK
APT / EstatalINC Ransom MITRE ATT&CK
APT / EstatalKe3chang🇨🇳 MITRE ATT&CK
APT / EstatalKimsuky🇰🇵 MITRE ATT&CK
APT / EstatalLeviathan🇨🇳 MITRE ATT&CK
APT / EstatalMagic Hound🇮🇷 MITRE ATT&CK
APT / EstatalMedusa Group MITRE ATT&CK
APT / EstatalmenuPass🇨🇳 MITRE ATT&CK
APT / EstatalMirrorFace🇨🇳 MITRE ATT&CK
APT / EstatalMoses Staff🇮🇷 MITRE ATT&CK
APT / EstatalMuddyWater🇮🇷 MITRE ATT&CK
APT / EstatalPlay MITRE ATT&CK
APT / EstatalRocke🇨🇳 MITRE ATT&CK
APT / EstatalSalt Typhoon🇨🇳 MITRE ATT&CK
APT / EstatalSandworm Team🇷🇺 MITRE ATT&CK
APT / EstatalSea Turtle MITRE ATT&CK
APT / EstatalShinyHunters MITRE ATT&CK
APT / EstatalStorm-0501 MITRE ATT&CK
APT / EstatalTeamPCP MITRE ATT&CK
APT / EstatalThreat Group-3390🇨🇳 MITRE ATT&CK
APT / EstatalToddyCat MITRE ATT&CK
APT / EstatalTonto Team🇨🇳 MITRE ATT&CK
APT / EstatalUNC3886🇨🇳 MITRE ATT&CK
APT / EstatalVOID MANTICORE🇮🇷 MITRE ATT&CK
APT / EstatalVolatile Cedar MITRE ATT&CK
APT / EstatalVolt Typhoon🇨🇳 MITRE ATT&CK
APT / EstatalWinter Vivern🇷🇺 MITRE ATT&CK
APT / EstatalWizard Spider🇷🇺 MITRE ATT&CK
Oracle MySQL through 5.5.52, 5.6.x through 5.6.33, and 5.7.x through 5.7.15; MariaDB before 5.5.51, 10.0.x before 10.0.27, and 10.1.x before 10.1.17; and Percona Server before 5.5.51-38.1, 5.6.x before 5.6.32-78.0, and 5.7.x before 5.7.14-7 allow local users to create arbitrary configurations and bypass certain protection mechanisms by setting general_log_file to a my.cnf configuration. NOTE: this can be leveraged to execute arbitrary code with root privileges by setting malloc_lib. NOTE: the affected MySQL version information is from Oracle's October 2016 CPU. Oracle has not commented on third-party claims that the issue was silently patched in MySQL 5.5.52, 5.6.33, and 5.7.15.
Produtos afetados
n/a · n/aPoCs públicas encontradas — 11
exploitdbwww.exploit-db.com/exploits/40360não verificadogithubgithub.com/MAYASEVEN/CVE-2016-6662★ 29githubgithub.com/Ashrafdev/MySQL-Remote-Root-Code-Execution★ 9githubgithub.com/boompig/cve-2016-6662★ 1githubgithub.com/meersjo/ansible-mysql-cve-2016-6662★ 1githubgithub.com/konstantin-kelemen/mysqld_safe-CVE-2016-6662-patch★ 0githubgithub.com/KosukeShimofuji/CVE-2016-6662★ 0vulncheckvulncheck.com/xdb/60add9bf4d4enão verificadocve_referencewww.exploit-db.com/exploits/40360/não verificadovulncheckvulncheck.com/xdb/77badbece00enão verificadovulncheckvulncheck.com/xdb/39e334b00224não verificado⚠ Recursos públicos, para você avaliar a exposição de sistemas que controla ou está autorizado a testar. Teste apenas com autorização.
Referências
http://legalhackers.com/advisories/MySQL-Exploit-Remote-Root-Code-Execution-Privesc-CVE-2016-6662.htmlhttp://rhn.redhat.com/errata/RHSA-2016-2058.htmlhttp://rhn.redhat.com/errata/RHSA-2016-2059.htmlhttp://rhn.redhat.com/errata/RHSA-2016-2060.htmlhttp://rhn.redhat.com/errata/RHSA-2016-2061.htmlhttp://rhn.redhat.com/errata/RHSA-2016-2062.htmlhttp://rhn.redhat.com/errata/RHSA-2016-2077.htmlhttp://rhn.redhat.com/errata/RHSA-2016-2130.htmlhttp://rhn.redhat.com/errata/RHSA-2016-2131.htmlhttp://rhn.redhat.com/errata/RHSA-2016-2595.htmlhttp://rhn.redhat.com/errata/RHSA-2016-2749.htmlhttp://rhn.redhat.com/errata/RHSA-2016-2927.html