XT
Product
Xtrabackup
6
CVEs
0
On KEV
7.8
Max CVSS
0
New 30D
Severity mix
Critical 0High 1Medium 4Low 0
Watch
Add Xtrabackup to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2022-25834 | 7.8 | Jun 7 | In Percona XtraBackup (PXB) through 2.2.24 and 3.x through 8.0.27-19, a crafted filename on the local file system could trigger unexpected command shell execution of arbitrary… Affected: through 2.2.24; 3.0 through 8.0.27-19 |
| CVE-2022-26944 | 6.5 | Jun 2 | Percona XtraBackup 2.4.20 unintentionally writes the command line to any resulting backup file output Affected: 2.4.20 |
| CVE-2020-10997 | 6.5 | Apr 27 | Percona XtraBackup before 2.4.20 unintentionally writes the command line to any resulting backup file output Affected: 2.4.11 before 2.4.20; 8.0.4 before 8.0.11 |
| CVE-2015-1027 | 5.9 | Sep 29 | The version checking subroutine in percona-toolkit before 2.2.13 and xtrabackup before 2.2.9 was vulnerable to silent HTTP downgrade attacks and Man In The Middle attacks in which… Affected: through 2.2.8 |
| CVE-2016-6225 | 5.9 | Mar 23 | xbcrypt in Percona XtraBackup before 2.3.6 and 2.4.x before 2.4.5 does not properly set the initialization vector (IV) for encryption, which makes it easier for context-dependent… Affected: through 2.3.5; 2.4.0; 2.4.1; 2.4.2; 2.4.3; 2.4.4 |
| CVE-2013-6394 | – | Dec 13 | Percona XtraBackup before 2.1.6 uses a constant string for the initialization vector (IV), which makes it easier for local users to defeat cryptographic protection mechanisms and… Affected: through 2.1.5; 2.1.0; 2.1.0; 2.1.0; 2.1.1; 2.1.2; +2 more |
Showing 6