2.1

CVE-2013-6394

Percona XtraBackup before 2.1.6 uses a constant string for the initialization vector (IV), which makes it easier for local users to defeat cryptographic protection mechanisms and conduct plaintext attacks.

Data is provided by the National Vulnerability Database (NVD)
Percona ≫ Xtrabackup Version <= 2.1.5
Percona ≫ Xtrabackup Version2.1.0 Updatealpha1
Percona ≫ Xtrabackup Version2.1.0 Updatebeta1
Percona ≫ Xtrabackup Version2.1.0 Updaterc1
Percona ≫ Xtrabackup Version2.1.1
Percona ≫ Xtrabackup Version2.1.2
Percona ≫ Xtrabackup Version2.1.3
Percona ≫ Xtrabackup Version2.1.4
Opensuse ≫ Opensuse Version13.1
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 0.06% 0.155
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
nvd@nist.gov 2.1 3.9 2.9
AV:L/AC:L/Au:N/C:N/I:P/A:N