Homepage

Link Following The advisory has been revoked - it doesn't affect any version of package mariadb-galera.src  (opens in a new tab)

Threat Intelligence

Exploit Maturity
Proof of Concept
EPSS
54.39% (99th percentile)

Do your applications use this vulnerable package?

In a few clicks we can analyze your entire application and see what components are vulnerable in your application, and suggest you quick fixes.

Test your applications
  • Snyk IDSNYK-RHEL10-MARIADBGALERASRC-12613624
  • published11 Sept 2025
  • disclosed19 Oct 2016
Report a new vulnerability Found a mistake?

Introduced: 19 Oct 2016

CVE-2016-6664  (opens in a new tab)
CWE-59  (opens in a new tab)

Amendment

The Red Hat security team deemed this advisory irrelevant for RHEL:10.

NVD Description

Note: Versions mentioned in the description apply only to the upstream mariadb-galera.src package and not the mariadb-galera.src package as distributed by RHEL.

mysqld_safe in Oracle MySQL through 5.5.51, 5.6.x through 5.6.32, and 5.7.x through 5.7.14; MariaDB; Percona Server before 5.5.51-38.2, 5.6.x before 5.6.32-78-1, and 5.7.x before 5.7.14-8; and Percona XtraDB Cluster before 5.5.41-37.0, 5.6.x before 5.6.32-25.17, and 5.7.x before 5.7.14-26.17, when using file-based logging, allows local users with access to the mysql account to gain root privileges via a symlink attack on error logs and possibly other files.

References