Поиск уязвимостей
Количество 7
Количество 7
GHSA-qgjv-rwc2-2rr2
xbcrypt in Percona XtraBackup before 2.3.6 and 2.4.x before 2.4.5 does not properly set the initialization vector (IV) for encryption, which makes it easier for context-dependent attackers to obtain sensitive information from encrypted backup files via a Chosen-Plaintext attack. NOTE: this vulnerability exists because of an incomplete fix for CVE-2013-6394.
CVE-2016-6225
xbcrypt in Percona XtraBackup before 2.3.6 and 2.4.x before 2.4.5 does not properly set the initialization vector (IV) for encryption, which makes it easier for context-dependent attackers to obtain sensitive information from encrypted backup files via a Chosen-Plaintext attack. NOTE: this vulnerability exists because of an incomplete fix for CVE-2013-6394.
CVE-2016-6225
xbcrypt in Percona XtraBackup before 2.3.6 and 2.4.x before 2.4.5 does not properly set the initialization vector (IV) for encryption, which makes it easier for context-dependent attackers to obtain sensitive information from encrypted backup files via a Chosen-Plaintext attack. NOTE: this vulnerability exists because of an incomplete fix for CVE-2013-6394.
CVE-2016-6225
xbcrypt in Percona XtraBackup before 2.3.6 and 2.4.x before 2.4.5 does ...
openSUSE-SU-2017:0251-1
Security update for xtrabackup
openSUSE-SU-2017:0250-1
Security update for xtrabackup
ALT-PU-2017-3601
ALT-PU-2017-3601: package `percona-xtrabackup` update to version 2.4.5-alt2
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
| GHSA-qgjv-rwc2-2rr2 xbcrypt in Percona XtraBackup before 2.3.6 and 2.4.x before 2.4.5 does not properly set the initialization vector (IV) for encryption, which makes it easier for context-dependent attackers to obtain sensitive information from encrypted backup files via a Chosen-Plaintext attack. NOTE: this vulnerability exists because of an incomplete fix for CVE-2013-6394. | CVSS3: 5.9 | 1% Низкий | больше 4 лет назад |
 | CVE-2016-6225 xbcrypt in Percona XtraBackup before 2.3.6 and 2.4.x before 2.4.5 does not properly set the initialization vector (IV) for encryption, which makes it easier for context-dependent attackers to obtain sensitive information from encrypted backup files via a Chosen-Plaintext attack. NOTE: this vulnerability exists because of an incomplete fix for CVE-2013-6394. | CVSS3: 5.9 | 1% Низкий | больше 9 лет назад |
 | CVE-2016-6225 xbcrypt in Percona XtraBackup before 2.3.6 and 2.4.x before 2.4.5 does not properly set the initialization vector (IV) for encryption, which makes it easier for context-dependent attackers to obtain sensitive information from encrypted backup files via a Chosen-Plaintext attack. NOTE: this vulnerability exists because of an incomplete fix for CVE-2013-6394. | CVSS3: 5.9 | 1% Низкий | больше 9 лет назад |
| CVE-2016-6225 xbcrypt in Percona XtraBackup before 2.3.6 and 2.4.x before 2.4.5 does ... | CVSS3: 5.9 | 1% Низкий | больше 9 лет назад |
 | openSUSE-SU-2017:0251-1 Security update for xtrabackup | 1% Низкий | почти 10 лет назад | |
| openSUSE-SU-2017:0250-1 Security update for xtrabackup | 1% Низкий | почти 10 лет назад | |
| ALT-PU-2017-3601 ALT-PU-2017-3601: package `percona-xtrabackup` update to version 2.4.5-alt2 | CVSS3: 5.9 | 1% Низкий | почти 10 лет назад |
Уязвимостей на страницу