CVE catalog

CVE-2024-7701

percona-toolkit: CVE-2024-7701

[CVE catalog]

Severity
Low
Published
Source
[NVD] · [CVE record]
EPSS
0.21% · Oct 25, 2026

Use of Password Hash With Insufficient Computational Effort vulnerability in percona percona-toolkit allows Encryption Brute Forcing.This issue affects percona-toolkit: 3.6.0.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Debianpercona-toolkitsid3.7.1-5fixed
Debianpercona-toolkitforky3.7.1-5fixed
Debianpercona-toolkittrixie3.2.1-1vulnerable
Debianpercona-toolkitbookworm3.2.1-1vulnerable

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
Debianpercona-toolkitsourcesid3.7.1-1unimportantNot reported[1091435]
Debianpercona-toolkitsourceforky3.7.1-1unimportantNot reported[1091435]
Debianpercona-toolkitsourcetrixie(unfixed)unimportantNot reported[1091435]
Debianpercona-toolkitsourcebookworm(unfixed)unimportantNot reported[1091435]

[Debian bug #1091435]

OpenFactory catalog packages

[Debian 12 (Bookworm)]

  • [percona-toolkit]Affected
    Details (2)
    • 3.2.1-1 · all · bookworm

      Affected

      dsa · percona-toolkit · debian · bookworm; dsa · percona-toolkit · debian · 12

    • 3.2.1-1 · all · bookworm

      Affected

      dsa · percona-toolkit · debian · bookworm; dsa · percona-toolkit · debian · 12

[Debian 13 (Trixie)]

  • [percona-toolkit]Affected
    Details (2)
    • 3.2.1-1 · all · trixie

      Affected

      dsa · percona-toolkit · debian · 13

    • 3.2.1-1 · all · trixie

      Affected

      dsa · percona-toolkit · debian · 13

Observed:

References