Percona Xtrabackup
6 CVEs affecting Percona Xtrabackup. Latest disclosed: 2023-06-07. Critical: 0, High: 1.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2022-25834 | High | 7.8 | 2023-06-07 | In Percona XtraBackup (PXB) through 2.2.24 and 3.x through 8.0.27-19, a crafted filename on the local file system could trigger unexpected command shell execut… |
CVE-2022-26944 | Medium | 6.5 | 2022-06-02 | Percona XtraBackup 2.4.20 unintentionally writes the command line to any resulting backup file output. This may include sensitive arguments passed at run time… |
CVE-2020-10997 | Medium | 6.5 | 2020-04-27 | Percona XtraBackup before 2.4.20 unintentionally writes the command line to any resulting backup file output. This may include sensitive arguments passed at ru… |
CVE-2015-1027 | Medium | 5.9 | 2017-09-29 | The version checking subroutine in percona-toolkit before 2.2.13 and xtrabackup before 2.2.9 was vulnerable to silent HTTP downgrade attacks and Man In The Mid… |
CVE-2016-6225 | Medium | 5.9 | 2017-03-23 | xbcrypt in Percona XtraBackup before 2.3.6 and 2.4.x before 2.4.5 does not properly set the initialization vector (IV) for encryption, which makes it easier fo… |
CVE-2013-6394 | | 2013-12-13 | Percona XtraBackup before 2.1.6 uses a constant string for the initialization vector (IV), which makes it easier for local users to defeat cryptographic protec… |