CVE-2013-6394
Severity CVSS v4.0:
Pending analysis
Type:
CWE-310
Cryptographic Issues
Publication date:
13/12/2013
Last modified:
11/04/2025
Description
Percona XtraBackup before 2.1.6 uses a constant string for the initialization vector (IV), which makes it easier for local users to defeat cryptographic protection mechanisms and conduct plaintext attacks.
Impact
Base Score 2.0
2.10
Severity 2.0
LOW
Vulnerable products and versions
| CPE | From | Up to |
|---|---|---|
| cpe:2.3:a:percona:xtrabackup:*:*:*:*:*:*:*:* | 2.1.5 (including) | |
| cpe:2.3:a:percona:xtrabackup:2.1.0:alpha1:*:*:*:*:*:* | ||
| cpe:2.3:a:percona:xtrabackup:2.1.0:beta1:*:*:*:*:*:* | ||
| cpe:2.3:a:percona:xtrabackup:2.1.0:rc1:*:*:*:*:*:* | ||
| cpe:2.3:a:percona:xtrabackup:2.1.1:*:*:*:*:*:*:* | ||
| cpe:2.3:a:percona:xtrabackup:2.1.2:*:*:*:*:*:*:* | ||
| cpe:2.3:a:percona:xtrabackup:2.1.3:*:*:*:*:*:*:* | ||
| cpe:2.3:a:percona:xtrabackup:2.1.4:*:*:*:*:*:*:* | ||
| cpe:2.3:o:opensuse:opensuse:13.1:*:*:*:*:*:*:* |
To consult the complete list of CPE names with products and versions, see this page
References to Advisories, Solutions, and Tools
- http://lists.opensuse.org/opensuse-updates/2013-12/msg00052.html
- http://lists.opensuse.org/opensuse-updates/2014-02/msg00044.html
- http://www.openwall.com/lists/oss-security/2013/11/26/11
- http://www.percona.com/doc/percona-xtrabackup/2.1/release-notes/2.1/2.1.6.html
- http://lists.opensuse.org/opensuse-updates/2013-12/msg00052.html
- http://lists.opensuse.org/opensuse-updates/2014-02/msg00044.html
- http://www.openwall.com/lists/oss-security/2013/11/26/11
- http://www.percona.com/doc/percona-xtrabackup/2.1/release-notes/2.1/2.1.6.html