CVE-2016-6662

CVE-2016-6662 is a critical vulnerability affecting Oracle MySQL, MariaDB, and Percona Server versions, allowing local users to create arbitrary configurations by manipulating the general_log_file setting. This can bypass protection mechanisms and, notably, be leveraged for arbitrary code execution with root privileges by setting malloc_lib. With a CVSS score of 9.8 (CRITICAL), this vulnerability presents a severe risk due to its network-based attack vector, low complexity, and high impact on confidentiality, integrity, and availability. While not listed on CISA's KEV catalog, exploit code is publicly available via ExploitDB, and the vulnerability has garnered significant community discussion and media coverage, indicating a high potential for exploitation.