THREATINT

We use these services and cookies to improve your user experience. You may opt out if you wish, however, this may limit some features on this site.

Please see our statement on Data Privacy.

Zendesk (Helpdesk and Chat)

Ok

PUBLISHED

CVE-2024-33900

Updated:2024-06-06

Description

KeePassXC 2.7.7 allows an attacker (who has the privileges of the victim) to recover cleartext credentials via a memory dump. NOTE: the vendor disputes this because memory-management constraints make this unavoidable in the current design and other realistic designs.

References

https://keepassxc.org/blog/

https://gist.github.com/Fastor01/30c6d89c842feb1865ec2cd2d3806838

https://github.com/keepassxreboot/keepassxc/issues/10784

https://keepassxc.org/blog/2019-02-21-memory-security/

cve.org CVE-2024-33900

nvd.nist.gov CVE-2024-33900

Download JSON

Share this page
https://cve.threatint.com/CVE/CVE-2024-33900