CVE-2022-26944

概要

参考情報

• docs.percona.com/percona-xtrabackup/2.4/release-notes/2.4/2.4.25.html · Release Notes
• jira.percona.com/browse/PXB-2722 · Permissions Required

xtrabackup のその他の脆弱性

• CVE-2022-25834高 7.8In Percona XtraBackup (PXB) through 2.2.24 and 3.x through 8.0.27-19, a crafted filename on the local file system could trigger unexpected c…
• CVE-2020-10997中 6.5Percona XtraBackup before 2.4.20 unintentionally writes the command line to any resulting backup file output. This may include sensitive arg…
• CVE-2015-1027中 5.9The version checking subroutine in percona-toolkit before 2.2.13 and xtrabackup before 2.2.9 was vulnerable to silent HTTP downgrade attacks…
• CVE-2016-6225中 5.9xbcrypt in Percona XtraBackup before 2.3.6 and 2.4.x before 2.4.5 does not properly set the initialization vector (IV) for encryption, which…
• CVE-2013-6394低 2.1Percona XtraBackup before 2.1.6 uses a constant string for the initialization vector (IV), which makes it easier for local users to defeat c…