CVE-2022-25834

概要

参考情報

• docs.percona.com/percona-xtrabackup/8.0/release-notes/8.0/8.0.32-26.0.html · Release Notes
• percona.com/doc/percona-xtrabackup/2.4/index.html · Vendor Advisory

xtrabackup のその他の脆弱性

• CVE-2022-26944中 6.5Percona XtraBackup 2.4.20 unintentionally writes the command line to any resulting backup file output. This may include sensitive arguments …
• CVE-2020-10997中 6.5Percona XtraBackup before 2.4.20 unintentionally writes the command line to any resulting backup file output. This may include sensitive arg…
• CVE-2015-1027中 5.9The version checking subroutine in percona-toolkit before 2.2.13 and xtrabackup before 2.2.9 was vulnerable to silent HTTP downgrade attacks…
• CVE-2016-6225中 5.9xbcrypt in Percona XtraBackup before 2.3.6 and 2.4.x before 2.4.5 does not properly set the initialization vector (IV) for encryption, which…
• CVE-2013-6394低 2.1Percona XtraBackup before 2.1.6 uses a constant string for the initialization vector (IV), which makes it easier for local users to defeat c…