percona/percona-xtrabackup

percona/percona-xtrabackup

www.percona.com

Releases122

Frequency1 month 6 days

Last Release about 2 months ago

Stars1.53K

Open source hot backup tool for InnoDB and XtraDB databases

Log in to subscribe

CVE History

CVE	Published	CVSS v3	CVSS v2
CVE-2022-45866 ↗	Nov 23, 2022Wednesday, 23 November 2022, 20:15	5.3 MEDIUM	—
qpress before PierreLvx/qpress 20220819 and before version 11.3, as used in Percona XtraBackup and other products, allows directory traversal via ../ in a .qp file.
CVE-2016-6225 ↗	Mar 23, 2017Thursday, 23 March 2017, 16:59	—	4.3 MEDIUM
xbcrypt in Percona XtraBackup before 2.3.6 and 2.4.x before 2.4.5 does not properly set the initialization vector (IV) for encryption, which makes it easier for context-dependent attackers to obtain sensitive information from encrypted backup files via a Chosen-Plaintext attack. NOTE: this vulnerability exists because of an incomplete fix for CVE-2013-6394.