CVE

Id
93045  
CVE No.
CVE-2016-6225  
Status
Candidate  
Description
xbcrypt in Percona XtraBackup before 2.3.6 and 2.4.x before 2.4.5 does not properly set the initialization vector (IV) for encryption, which makes it easier for context-dependent attackers to obtain sensitive information from encrypted backup files via a Chosen-Plaintext attack. NOTE: this vulnerability exists because of an incomplete fix for CVE-2013-6394.  
Phase
Assigned (20160715)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
792315 93045 CVE-2016-6225 CONFIRM:https://bugs.launchpad.net/percona-xtrabackup/+bug/1643949  View
792316 93045 CVE-2016-6225 CONFIRM:https://github.com/percona/percona-xtrabackup/pull/266  View
792317 93045 CVE-2016-6225 CONFIRM:https://github.com/percona/percona-xtrabackup/pull/267  View
792318 93045 CVE-2016-6225 CONFIRM:https://www.percona.com/blog/2017/01/12/cve-2016-6225-percona-xtrabackup-encryption-iv-not-set-properly/  View
792319 93045 CVE-2016-6225 FEDORA:FEDORA-2017-5a823376be  View
792320 93045 CVE-2016-6225 URL:https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZBVCP6KLFVGG6HSGLHLTMZRD6C4IJSZP/  View
792321 93045 CVE-2016-6225 FEDORA:FEDORA-2017-6382ea8d57  View
792322 93045 CVE-2016-6225 URL:https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/BAHI6ETS22FJCMLW7A6SICFKQXF5G2VI/  View
792323 93045 CVE-2016-6225 SUSE:openSUSE-SU-2017:0250  View
792324 93045 CVE-2016-6225 URL:http://lists.opensuse.org/opensuse-updates/2017-01/msg00125.html  View
792325 93045 CVE-2016-6225 SUSE:openSUSE-SU-2017:0251  View

Related JVN