CVE-2020-10997

概要

参考情報

• jira.percona.com/browse/PXB-2142 · Vendor Advisory
• percona.com/blog/2020/04/16/cve-2020-10997-percona-xtrabackup-information-disclosure-of-command-line-arguments · Vendor Advisory

xtrabackup のその他の脆弱性

• CVE-2022-25834高 7.8In Percona XtraBackup (PXB) through 2.2.24 and 3.x through 8.0.27-19, a crafted filename on the local file system could trigger unexpected c…
• CVE-2022-26944中 6.5Percona XtraBackup 2.4.20 unintentionally writes the command line to any resulting backup file output. This may include sensitive arguments …
• CVE-2015-1027中 5.9The version checking subroutine in percona-toolkit before 2.2.13 and xtrabackup before 2.2.9 was vulnerable to silent HTTP downgrade attacks…
• CVE-2016-6225中 5.9xbcrypt in Percona XtraBackup before 2.3.6 and 2.4.x before 2.4.5 does not properly set the initialization vector (IV) for encryption, which…
• CVE-2013-6394低 2.1Percona XtraBackup before 2.1.6 uses a constant string for the initialization vector (IV), which makes it easier for local users to defeat c…