medium6.5
CVE-2024-33900
KeePassXC 2.7.7 allows an attacker (who has the privileges of the victim) to recover cleartext credentials via a memory dump.
Impact
KeePassXC 2.7.7 allows an attacker (who has the privileges of the victim) to recover cleartext credentials via a memory dump. NOTE: the vendor disputes this because memory-management constraints make this unavoidable in the current design and other realistic designs.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Keepassxc | Keepassxc | Version 2.7.7 |
Weakness classification
References
- NVD record
- CVE.org record
- https://gist.github.com/Fastor01/30c6d89c842feb1865ec2cd2d3806838
- https://github.com/keepassxreboot/keepassxc/issues/10784
- https://keepassxc.org/blog/
- https://keepassxc.org/blog/2019-02-21-memory-security/
- https://gist.github.com/Fastor01/30c6d89c842feb1865ec2cd2d3806838
- https://github.com/keepassxreboot/keepassxc/issues/10784
- https://keepassxc.org/blog/
- https://keepassxc.org/blog/2019-02-21-memory-security/