CVE-2016-6663

36

FAUCET Score

CVE-2016-6663 is a race condition vulnerability affecting Oracle MySQL, MariaDB, and Percona Server versions, allowing a local user with certain permissions to escalate privileges. This high-severity vulnerability (CVSS 7.0) has a low attack complexity and can lead to full compromise of confidentiality, integrity, and availability. While not on the KEV catalog, public exploit code exists (EDB-40678), and it has garnered significant community discussion and media coverage, indicating a high potential for exploitation.

Impacted Technologies

Vendor	Product	Version(s)	CPE
		>= 5.5.0, <= 5.5.52CPE matchmatch criteria	cpe:2.3:a:oracle:mysql::::::::
		>= 5.6.0, <= 5.6.33CPE matchmatch criteria	cpe:2.3:a:oracle:mysql::::::::
		>= 5.7.0, <= 5.7.15CPE matchmatch criteria	cpe:2.3:a:oracle:mysql::::::::
		>= 5.5, < 5.5.51-38.2CPE matchmatch criteria	cpe:2.3:a:percona:percona_server::::::::
		>= 5.6, < 5.6.32-78.1CPE matchmatch criteria	cpe:2.3:a:percona:percona_server::::::::

CVSS Data

CVSS version used by this source: 3.0

7.0HIGH

CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Attack Vector

LOCAL

Attack Complexity

HIGH

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

Exploitability Score

1.0

Impact Score

5.9

CvssVersion

3.0

Exploit Intelligence

EPSS Score

4.31%

Probability of exploitation in next 30 days

EPSS Percentile

90.1%

Percentile rank of EPSS score among Peer Group

As of 2026-07-25

Model: v2026.06.15

ExploitDB: EDB-40678 · Nov 1, 2016

This CVE's current EPSS score of 0.0431 is in the 98th percentile among its peer group of 1,516 CVEs.

Social Chatter

The average CVE in this peer group has 0.0 Twitter, 0.1 Reddit, 0.1 Bluesky, 0.1 Mastodon, and 0.2 GitHub mentions.

Media Mentions

The average CVE in this peer group has 0.4 InfoSec Media, 0.1 Vendor Blog, and 0.0 Security Researcher mentions.

Remediation

Patch Available

Vendor Patches (42)

github_advisorypatch availablevia nvd_reference

oraclepatch availablevia nvd_reference

redhatpatch availablevia redhat_api

Product: Red Hat Software Collections for Red Hat Enterprise Linux 6Fixed in: rh-mariadb101-mariadb-1:10.1.19-6.el6

redhatpatch availablevia redhat_api

Product: Red Hat Software Collections for Red Hat Enterprise Linux 7Fixed in: rh-mariadb101-mariadb-1:10.1.19-6.el7

redhatpatch availablevia redhat_api

Product: Red Hat Software Collections for Red Hat Enterprise Linux 7.1 EUSFixed in: mysql55-mysql-0:5.5.52-1.el7

redhatpatch availablevia redhat_api

Product: Red Hat Software Collections for Red Hat Enterprise Linux 7.1 EUSFixed in: mariadb55-mariadb-0:5.5.53-1.el7

redhatpatch availablevia redhat_api

Product: Red Hat Software Collections for Red Hat Enterprise Linux 7.1 EUSFixed in: rh-mysql56-mysql-0:5.6.34-2.el7

redhatpatch availablevia redhat_api

Product: Red Hat Software Collections for Red Hat Enterprise Linux 7.2 EUSFixed in: mysql55-mysql-0:5.5.52-1.el7

redhatpatch availablevia redhat_api

Product: Red Hat Software Collections for Red Hat Enterprise Linux 7.2 EUSFixed in: mariadb55-mariadb-0:5.5.53-1.el7

redhatpatch availablevia redhat_api

Product: Red Hat Software Collections for Red Hat Enterprise Linux 7.2 EUSFixed in: rh-mysql56-mysql-0:5.6.34-2.el7

redhatpatch availablevia redhat_api

Product: Red Hat Software Collections for Red Hat Enterprise Linux 7.2 EUSFixed in: rh-mariadb100-mariadb-1:10.0.28-5.el7

redhatpatch availablevia redhat_api

Product: Red Hat Software Collections for Red Hat Enterprise Linux 7.2 EUSFixed in: rh-mariadb101-mariadb-1:10.1.19-6.el7

redhatpatch availablevia redhat_api

Product: Red Hat Software Collections for Red Hat Enterprise Linux 7.3 EUSFixed in: rh-mariadb100-mariadb-1:10.0.28-5.el7

redhatpatch availablevia redhat_api

Product: Red Hat Software Collections for Red Hat Enterprise Linux 7.3 EUSFixed in: rh-mariadb101-mariadb-1:10.1.19-6.el7

redhatpatch availablevia redhat_api

Product: Red Hat Enterprise Linux 6Fixed in: mysql-0:5.1.73-8.el6_8

redhatpatch availablevia redhat_api

Product: Red Hat Enterprise Linux 7Fixed in: mariadb-1:5.5.52-1.el7

redhatpatch availablevia redhat_api

Product: Red Hat Software Collections for Red Hat Enterprise Linux 6Fixed in: mysql55-mysql-0:5.5.52-1.el6

redhatpatch availablevia redhat_api

Product: Red Hat Software Collections for Red Hat Enterprise Linux 6Fixed in: mariadb55-mariadb-0:5.5.53-1.el6

redhatpatch availablevia redhat_api

Product: Red Hat Software Collections for Red Hat Enterprise Linux 6Fixed in: rh-mysql56-mysql-0:5.6.34-2.el6

redhatpatch availablevia redhat_api

Product: Red Hat Software Collections for Red Hat Enterprise Linux 6Fixed in: rh-mariadb100-mariadb-1:10.0.28-5.el6

redhatpatch availablevia redhat_api

Product: Red Hat Software Collections for Red Hat Enterprise Linux 6.6 EUSFixed in: mysql55-mysql-0:5.5.52-1.el6

redhatpatch availablevia redhat_api

Product: Red Hat Software Collections for Red Hat Enterprise Linux 6.6 EUSFixed in: mariadb55-mariadb-0:5.5.53-1.el6

redhatpatch availablevia redhat_api

Product: Red Hat Software Collections for Red Hat Enterprise Linux 6.7 EUSFixed in: mysql55-mysql-0:5.5.52-1.el6

redhatpatch availablevia redhat_api

Product: Red Hat Software Collections for Red Hat Enterprise Linux 6.7 EUSFixed in: mariadb55-mariadb-0:5.5.53-1.el6

redhatpatch availablevia redhat_api

Product: Red Hat Software Collections for Red Hat Enterprise Linux 6.7 EUSFixed in: rh-mysql56-mysql-0:5.6.34-2.el6

redhatpatch availablevia redhat_api

Product: Red Hat Software Collections for Red Hat Enterprise Linux 6.7 EUSFixed in: rh-mariadb100-mariadb-1:10.0.28-5.el6

redhatpatch availablevia redhat_api

Product: Red Hat Software Collections for Red Hat Enterprise Linux 6.7 EUSFixed in: rh-mariadb101-mariadb-1:10.1.19-6.el6

redhatpatch availablevia redhat_api

Product: Red Hat Software Collections for Red Hat Enterprise Linux 7Fixed in: mysql55-mysql-0:5.5.52-1.el7

redhatpatch availablevia redhat_api

Product: Red Hat Software Collections for Red Hat Enterprise Linux 7Fixed in: mariadb55-mariadb-0:5.5.53-1.el7

redhatpatch availablevia redhat_api

Product: Red Hat Software Collections for Red Hat Enterprise Linux 7Fixed in: rh-mysql56-mysql-0:5.6.34-2.el7

redhatpatch availablevia redhat_api

Product: Red Hat Software Collections for Red Hat Enterprise Linux 7Fixed in: rh-mariadb100-mariadb-1:10.0.28-5.el7

redhatvendor investigatingvia redhat_api

Product: Red Hat Mobile Application Platform 4Fixed in: millicore

redhatend of lifevia redhat_api

Product: Red Hat OpenStack Platform 12 (Pike)Fixed in: mariadb-galera

redhatend of lifevia redhat_api

Product: Red Hat Enterprise Linux 5Fixed in: mysql

redhatend of lifevia redhat_api

Product: Red Hat Enterprise Linux 5Fixed in: mysql55-mysql

redhatend of lifevia redhat_api

Product: Red Hat Enterprise Linux OpenStack Platform 5 (Icehouse)Fixed in: mariadb-galera

redhatend of lifevia redhat_api

Product: Red Hat Enterprise Linux OpenStack Platform 6 (Juno)Fixed in: mariadb-galera

redhatend of lifevia redhat_api

Product: Red Hat Enterprise Linux OpenStack Platform 7 (Kilo)Fixed in: mariadb-galera

redhatend of lifevia redhat_api

Product: Red Hat OpenStack Platform 8 (Liberty)Fixed in: mariadb-galera

redhatend of lifevia redhat_api

Product: Red Hat OpenStack Platform 10 (Newton)Fixed in: mariadb-galera

redhatend of lifevia redhat_api

Product: Red Hat OpenStack Platform 9 (Mitaka)Fixed in: mariadb-galera

redhatend of lifevia redhat_api

Product: Red Hat OpenStack Platform 11 (Ocata)Fixed in: mariadb-galera

Vendor Advisories (1)

redhatCVE-2016-6663Moderate

mysql: race condition while setting stats during MyISAM table repair (CPU Oct 2016)

References

rhn.redhat.com / errata/RHSA-2016-2130.html

Third Party Advisory

rhn.redhat.com / errata/RHSA-2016-2131.html

Third Party Advisory

rhn.redhat.com / errata/RHSA-2016-2595.html

Third Party Advisory

rhn.redhat.com / errata/RHSA-2016-2749.html

Third Party Advisory

rhn.redhat.com / errata/RHSA-2016-2927.html

Third Party Advisory

rhn.redhat.com / errata/RHSA-2016-2928.html

Third Party Advisory

rhn.redhat.com / errata/RHSA-2017-0184.html

Third Party Advisory

dev.mysql.com / doc/relnotes/mysql/5.5/en/news-5-5-52.html

Issue TrackingVendor Advisory

dev.mysql.com / doc/relnotes/mysql/5.6/en/news-5-6-33.html

Issue TrackingVendor Advisory

dev.mysql.com / doc/relnotes/mysql/5.7/en/news-5-7-15.html

Issue TrackingVendor Advisory

dev.mysql.com / doc/relnotes/mysql/8.0/en/news-8-0-1.html

Issue TrackingVendor Advisory

seclists.org / fulldisclosure/2016/Nov/4

Mailing ListThird Party Advisory

github.com / MariaDB/server/commit/347eeefbfc658c8531878218487d729f4e020805

Issue TrackingPatchThird Party Advisory

github.com / mysql/mysql-server/commit/4e5473862e6852b0f3802b0cd0c6fa10b5253291

Issue TrackingPatchThird Party Advisory

legalhackers.com / advisories/MySQL-Maria-Percona-PrivEscRace-CVE-2016-6663-5616-Exploit.html

ExploitThird Party Advisory

mariadb.com / kb/en/mariadb/mariadb-10028-release-notes

Release NotesVendor Advisory

mariadb.com / kb/en/mariadb/mariadb-10118-release-notes

Release NotesVendor Advisory

mariadb.com / kb/en/mariadb/mariadb-5552-release-notes

Release NotesVendor Advisory

exploit-db.com / exploits/40678

ExploitThird Party AdvisoryVDB Entry

percona.com / blog/2016/11/02/percona-responds-to-cve-2016-6663-and-cve-2016-6664

Vendor Advisory

openwall.com / lists/oss-security/2016/10/25/4

Mailing ListThird Party Advisory

oracle.com / technetwork/security-advisory/cpuoct2016-2881722.html

PatchVendor Advisory

securityfocus.com / bid/92911

Third Party AdvisoryVDB Entry

securityfocus.com / bid/93614

Third Party AdvisoryVDB Entry