Percona vulnerabilitiesNone on the known-exploited list.
Percona has 20 published vulnerabilities across 5 products in our catalogue. None of them is on the list of flaws known to be exploited today. The most affected product is Percona Server, with 7. If you run Percona software, patch the exploited flaws first.
We keep watching the known-exploited list.
Which Percona products have the most vulnerabilities?
Percona Server leads with 7 published vulnerabilities. Open a product to see its versions and which of its flaws criminals are already using.
Which Percona vulnerabilities are being exploited?
This is the list that matters most: flaws criminals are using now.
None of Percona's published vulnerabilities is on the list of flaws known to be exploited today. We keep watching that list.
Which Percona flaws are most likely to be used?
Ranked by the latest exploit-likelihood forecast: the chance each flaw is used in an attack in the next 30 days. A high severity score on its own doesn't tell you that. Flaws shared by many other makers' products are left out.
- 68%CVE-2016-6662Critical
Oracle MySQL through 5.5.52, 5.6.x through 5.6.33, and 5.7.x through 5.7.15; MariaDB before 5.5.51, 10.0.x before 10.0.27, and 10.1.x before 10.1.17; and Percona Server before 5.5.51-38.1, 5.6.x before 5.6.32-78.0,...
- 38%CVE-2021-27928High
A remote code execution issue was discovered in MariaDB 10.2 before 10.2.37, 10.3 before 10.3.28, 10.4 before 10.4.18, and 10.5 before 10.5.9; Percona Server through 2021-03-03; and the wsrep patch through 2021-03-03...
- 5.5%CVE-2020-15180Critical
A flaw was found in the mysql-wsrep component of mariadb.
- 4.3%CVE-2016-6663High
Race condition in Oracle MySQL before 5.5.52, 5.6.x before 5.6.33, 5.7.x before 5.7.15, and 8.x before 8.0.1; MariaDB before 5.5.52, 10.0.x before 10.0.28, and 10.1.x before 10.1.18; Percona Server before...
- 3.3%CVE-2017-15365High
sql/event_data_objects.cc in MariaDB before 10.1.30 and 10.2.x before 10.2.10 and Percona XtraDB Cluster before 5.6.37-26.21-3 and 5.7.x before 5.7.19-29.22-3 allows remote authenticated users with SQL access to...
- 3.0%CVE-2016-6664High
mysqld_safe in Oracle MySQL through 5.5.51, 5.6.x through 5.6.32, and 5.7.x through 5.7.14; MariaDB; Percona Server before 5.5.51-38.2, 5.6.x before 5.6.32-78-1, and 5.7.x before 5.7.14-8; and Percona XtraDB Cluster...
- 2.1%CVE-2020-7920High
pmm-server in Percona Monitoring and Management (PMM) 2.2.x before 2.2.1 allows unauthenticated denial of service.
- 2.0%CVE-2014-2029High
The automatic version check functionality in the tools in Percona Toolkit 2.1 allows man-in-the-middle attackers to obtain sensitive information or execute arbitrary code by leveraging use of HTTP to download...
- 2.0%CVE-2019-12301Critical
The Percona Server 5.6.44-85.0-1 packages for Debian and Ubuntu suffered an issue where the server would reset the root password to a blank value upon an upgrade.
- 1.5%CVE-2020-10996High
An issue was discovered in Percona XtraDB Cluster before 5.7.28-31.41.2.
All Percona products we track.
5 products, most vulnerabilities first. Find the ones you run, then open a product to see its versions and exploited flaws.
Running Percona? We'll keep checking.
Looking flaws up one at a time doesn't scale. Tell us what you run once, and we tell you which flaws matter to you, in what order, and keep watching for new ones.
- Tell us what you runPick your software from a list, or let us work it out from your website.
- We match it to every flawOver 400,000 published flaws, checked against your list.
- Ranked by real-world riskA 0 to 100 score, led by evidence criminals are using it.
- Told as soon as we knowAn alert by email, in the app or by webhook to your own tools.
Free plan, no card needed. Nothing to install.
1 new flaw affects software Acme tracks
Oracle MySQL through 5.5.52, 5.6.x through 5.6.33, and 5.7.x through 5.7.15; MariaDB before 5.5.51, 10.0.x before 10.0.27, and 10.1.x before 10.1.17; and Percona Server before 5.5.51-38.1, 5.6.x before 5.6.32-78.0, and 5.7.x before 5.7.14-7 allow local users to create arbitrary configurations and bypass certain protection mechanisms by setting general_log_file to a my.cnf configuration. NOTE: this can be leveraged to execute arbitrary code with root privileges by setting malloc_lib. NOTE: the affected MySQL version information is from Oracle's October 2016 CPU. Oracle has not commented on third-party claims that the issue was silently patched in MySQL 5.5.52, 5.6.33, and 5.7.15.
- Matched to
- Percona Server on Acme's software list
- What to do
- Plan in the vendor’s update
Sent to the alert recipients Acme chose. Also in the app and to Acme's webhook.
Our catalogue lists 20 published vulnerabilities across 5 products and 463 versions from Percona.
None of Percona's vulnerabilities is on the list of flaws known to be exploited today.
Percona Server, with 7 published vulnerabilities. Its own page lists the ones known to be exploited.
Create a Precursor Intelligence account and track the Percona products you run. We match them against every published flaw, give each one a risk score from 0 to 100 and tell you as soon as we spot one that affects you, by email, in the app or by webhook.