Xtrabackup
Percona · 6 CVEs
In Percona XtraBackup (PXB) through 2.2.24 and 3.x through 8.0.27-19, a crafted filename on the local file system could…
Jun 7, 2023
Percona XtraBackup 2.4.20 unintentionally writes the command line to any resulting backup file output. This may include…
Jun 2, 2022
Percona XtraBackup before 2.4.20 unintentionally writes the command line to any resulting backup file output. This may…
Apr 27, 2020
The version checking subroutine in percona-toolkit before 2.2.13 and xtrabackup before 2.2.9 was vulnerable to silent H…
Sep 28, 2017
xbcrypt in Percona XtraBackup before 2.3.6 and 2.4.x before 2.4.5 does not properly set the initialization vector (IV)…
Mar 23, 2017
Percona XtraBackup before 2.1.6 uses a constant string for the initialization vector (IV), which makes it easier for lo…
Dec 13, 2013
| CVE ID | Description | Severity | EPSS | Published |
|---|---|---|---|---|
| CVE-2022-25834 | In Percona XtraBackup (PXB) through 2.2.24 and 3.x through 8.0.27-19, a crafted filename on the local file system could trigger unexpected command shell execut… | HIGH | 0.46% | Jun 7, 2023 |
| CVE-2022-26944 | Percona XtraBackup 2.4.20 unintentionally writes the command line to any resulting backup file output. This may include sensitive arguments passed at run time.… | MEDIUM | 0.96% | Jun 2, 2022 |
| CVE-2020-10997 | Percona XtraBackup before 2.4.20 unintentionally writes the command line to any resulting backup file output. This may include sensitive arguments passed at ru… | MEDIUM | 0.95% | Apr 27, 2020 |
| CVE-2015-1027 | The version checking subroutine in percona-toolkit before 2.2.13 and xtrabackup before 2.2.9 was vulnerable to silent HTTP downgrade attacks and Man In The Mid… | MEDIUM | 1.20% | Sep 28, 2017 |
| CVE-2016-6225 | xbcrypt in Percona XtraBackup before 2.3.6 and 2.4.x before 2.4.5 does not properly set the initialization vector (IV) for encryption, which makes it easier fo… | MEDIUM | 1.12% | Mar 23, 2017 |
| CVE-2013-6394 | Percona XtraBackup before 2.1.6 uses a constant string for the initialization vector (IV), which makes it easier for local users to defeat cryptographic protec… | LOW | 0.38% | Dec 13, 2013 |
Showing 1 to 6 of 6 CVEs