2.1

CVE-2013-6394

Percona XtraBackup before 2.1.6 uses a constant string for the initialization vector (IV), which makes it easier for local users to defeat cryptographic protection mechanisms and conduct plaintext attacks.

Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Percona ≫ Xtrabackup Version <= 2.1.5
Percona ≫ Xtrabackup Version2.1.0 Updatealpha1
Percona ≫ Xtrabackup Version2.1.0 Updatebeta1
Percona ≫ Xtrabackup Version2.1.0 Updaterc1
Percona ≫ Xtrabackup Version2.1.1
Percona ≫ Xtrabackup Version2.1.2
Percona ≫ Xtrabackup Version2.1.3
Percona ≫ Xtrabackup Version2.1.4
Opensuse ≫ Opensuse Version13.1
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.06% 0.155
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 2.1 3.9 2.9
AV:L/AC:L/Au:N/C:N/I:P/A:N