CWE Code: 362
Vulnerability Type: privilege_escalation
CVSS Score: 4.4
CWE Name:  Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
Summary: race condition in oracle mysql before 5.5.52, 5.6.x before 5.6.33, 5.7.x before 5.7.15, and 8.x before 8.0.1; mariadb before 5.5.52, 10.0.x before 10.0.28, and 10.1.x before 10.1.18; percona server before 5.5.51-38.2, 5.6.x before 5.6.32-78-1, and 5.7.x before 5.7.14-8; and percona xtradb cluster before 5.5.41-37.0, 5.6.x before 5.6.32-25.17, and 5.7.x before 5.7.14-26.17 allows local users with certain permissions to gain privileges by leveraging use of my_copystat by repair table to repair a myisam table.
Access Authentication: NONE
Access Complexity: MEDIUM
Access Vector: LOCAL
Impact (C/I/A): PARTIAL/PARTIAL/PARTIAL
Published Date: 2016-12-13
Last Modified Date: 2019-03-05