CVE-2020-10996

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2020-10996
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2020-10996.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2020-10996
Downstream
Published
2020-04-27T13:15:12.333Z
Modified
2026-07-08T20:04:02.183431Z
Severity
  • 8.1 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H CVSS Calculator
Summary
[none]
Details

An issue was discovered in Percona XtraDB Cluster before 5.7.28-31.41.2. A bundled script inadvertently sets a static transition_key for SST processes in place of the random key expected.

References

Affected packages

Git / github.com/percona/percona-xtradb-cluster

Affected ranges

Type
GIT
Repo
https://github.com/percona/percona-xtradb-cluster
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Fixed
939b65f804c4d11372aa7b19df46a0afb29eea41
Database specific 
{
    "cpe": "cpe:2.3:a:percona:xtradb_cluster:*:*:*:*:*:*:*:*",
    "extracted_events": [
        {
            "introduced": "0"
        },
        {
            "fixed": "5.7.28-31.41.2"
        }
    ],
    "source": "CPE_RANGE"
}

Affected versions

Percona-Server-5.*
Percona-Server-5.6.5-60.0
Percona-XtraDB-Cluster-5.*
Percona-XtraDB-Cluster-5.6.14-25.1
Percona-XtraDB-Cluster-5.6.15-25.2
Percona-XtraDB-Cluster-5.6.15-25.3
Percona-XtraDB-Cluster-5.6.15-25.4
Percona-XtraDB-Cluster-5.6.15-25.5
Percona-XtraDB-Cluster-5.6.19-25.6
Percona-XtraDB-Cluster-5.6.20-25.7
Percona-XtraDB-Cluster-5.6.24-25.11
Percona-XtraDB-Cluster-5.7.19-29.22
Percona-XtraDB-Cluster-5.7.28-31.41
last-PS-5.*
last-PS-5.5-as-patches
Other
pre-null-merge
pxc_5.*
pxc_5.6.25-25.12-3.12

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2020-10996.json"