CVE-2020-10997

Description

References

• jira.percona.com/browse/PXB-2142 · Vendor Advisory
• percona.com/blog/2020/04/16/cve-2020-10997-percona-xtrabackup-information-disclosure-of-command-line-arguments · Vendor Advisory

xtrabackup 的其他漏洞

• CVE-2022-25834高危 7.8In Percona XtraBackup (PXB) through 2.2.24 and 3.x through 8.0.27-19, a crafted filename on the local file system could trigger unexpected c…
• CVE-2022-26944中危 6.5Percona XtraBackup 2.4.20 unintentionally writes the command line to any resulting backup file output. This may include sensitive arguments …
• CVE-2015-1027中危 5.9The version checking subroutine in percona-toolkit before 2.2.13 and xtrabackup before 2.2.9 was vulnerable to silent HTTP downgrade attacks…
• CVE-2016-6225中危 5.9xbcrypt in Percona XtraBackup before 2.3.6 and 2.4.x before 2.4.5 does not properly set the initialization vector (IV) for encryption, which…
• CVE-2013-6394低危 2.1Percona XtraBackup before 2.1.6 uses a constant string for the initialization vector (IV), which makes it easier for local users to defeat c…