2.1

CVE-2013-6394

Percona XtraBackup before 2.1.6 uses a constant string for the initialization vector (IV), which makes it easier for local users to defeat cryptographic protection mechanisms and conduct plaintext attacks.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Percona ≫ Xtrabackup Version <= 2.1.5
Percona ≫ Xtrabackup Version 2.1.0 Update alpha1
Percona ≫ Xtrabackup Version 2.1.0 Update beta1
Percona ≫ Xtrabackup Version 2.1.0 Update rc1
Percona ≫ Xtrabackup Version 2.1.1
Percona ≫ Xtrabackup Version 2.1.2
Percona ≫ Xtrabackup Version 2.1.3
Percona ≫ Xtrabackup Version 2.1.4
Opensuse ≫ Opensuse Version 13.1
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.38% 0.297
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 2.1 3.9 2.9
AV:L/AC:L/Au:N/C:N/I:P/A:N
Es wurden noch keine Informationen zu CWE veröffentlicht.
http://lists.opensuse.org/opensuse-updates/2013-12/msg00052.html
http://lists.opensuse.org/opensuse-updates/2014-02/msg00044.html
http://www.openwall.com/lists/oss-security/2013/11/26/11
http://www.percona.com/doc/percona-xtrabackup/2.1/release-notes/2.1/2.1.6.html
Patch
Vendor Advisory