CVE-2016-6225

概要

参考情報

• lists.opensuse.org/opensuse-updates/2017-01/msg00125.html · Third Party Advisory
• lists.opensuse.org/opensuse-updates/2017-01/msg00126.html · Third Party Advisory
• bugs.launchpad.net/percona-xtrabackup/+bug/1643949 · Issue Tracking
• percona/percona-xtrabackup#266 · Issue Tracking
• percona/percona-xtrabackup#267 · Issue Tracking
• lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BAHI6ETS22FJCMLW7A6SICFKQXF5G2VI
• lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZBVCP6KLFVGG6HSGLHLTMZRD6C4IJSZP
• percona.com/blog/2017/01/12/cve-2016-6225-percona-xtrabackup-encryption-iv-not-set-properly · Vendor Advisory

xtrabackup のその他の脆弱性

• CVE-2022-25834高 7.8In Percona XtraBackup (PXB) through 2.2.24 and 3.x through 8.0.27-19, a crafted filename on the local file system could trigger unexpected c…
• CVE-2022-26944中 6.5Percona XtraBackup 2.4.20 unintentionally writes the command line to any resulting backup file output. This may include sensitive arguments …
• CVE-2020-10997中 6.5Percona XtraBackup before 2.4.20 unintentionally writes the command line to any resulting backup file output. This may include sensitive arg…
• CVE-2015-1027中 5.9The version checking subroutine in percona-toolkit before 2.2.13 and xtrabackup before 2.2.9 was vulnerable to silent HTTP downgrade attacks…
• CVE-2013-6394低 2.1Percona XtraBackup before 2.1.6 uses a constant string for the initialization vector (IV), which makes it easier for local users to defeat c…