Unscored severity · published Dec 13, 2013
CVE-2013-6394
Percona XtraBackup before 2.1.6 uses a constant string for the initialization vector (IV), which makes it easier for local users to defeat cryptographic protection mechanisms and…
–
CVSS
0.4%
EPSS
No
On KEV
Description
Percona XtraBackup before 2.1.6 uses a constant string for the initialization vector (IV), which makes it easier for local users to defeat cryptographic protection mechanisms and conduct plaintext attacks.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.4% · higher than 32% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
OP
Opensuse · Opensuse
13.1 · source: NVD
XT
Xtrabackup · Percona
through 2.1.5; 2.1.0; 2.1.0; 2.1.0; 2.1.1; 2.1.2; +2 more · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2013-6394
CVE.org
https://www.cve.org/CVERecord?id=CVE-2013-6394
lists.opensuse.org
http://lists.opensuse.org/opensuse-updates/2013-12/msg00052.html
lists.opensuse.org
http://lists.opensuse.org/opensuse-updates/2014-02/msg00044.html
www.openwall.com
http://www.openwall.com/lists/oss-security/2013/11/26/11
Patch
http://www.percona.com/doc/percona-xtrabackup/2.1/release-notes/2.1/2.1.6.html
More from Opensuse
9.8
CVE-2016-4171
Adobe Flash Player Remote Code Execution Vulnerability
9.8
CVE-2016-4117
Adobe Flash Player Arbitrary Code Execution Vulnerability
9.8
CVE-2016-3427
Oracle Java SE and JRockit Unspecified Vulnerability
9.8
CVE-2015-2590
Oracle Java SE and Java SE Embedded Remote Code Execution Vulnerability
9.8
CVE-2015-5119
Adobe Flash Player Use-After-Free Vulnerability