Описание
Issue in KeePassXC 2.7.7 allows an attacker (who has the privileges of the victim) to recover some passwords stored in the .kdbx database via a memory dump. NOTE: the vendor disputes this because memory-management constraints make this unavoidable in the current design and other realistic designs.
| Релиз | Статус | Примечание |
|---|---|---|
| devel | not-affected | disputed |
| esm-apps/bionic | not-affected | disputed |
| esm-apps/focal | not-affected | disputed |
| esm-apps/jammy | not-affected | disputed |
| esm-apps/noble | not-affected | disputed |
| focal | not-affected | disputed |
| jammy | not-affected | disputed |
| mantic | ignored | end of life, was needs-triage |
| noble | not-affected | disputed |
| upstream | needs-triage |
Показывать по
6.5 Medium
CVSS3
Связанные уязвимости
Issue in KeePassXC 2.7.7 allows an attacker (who has the privileges of the victim) to recover some passwords stored in the .kdbx database via a memory dump. NOTE: the vendor disputes this because memory-management constraints make this unavoidable in the current design and other realistic designs.
Issue in KeePassXC 2.7.7 allows an attacker (who has the privileges of ...
Issue in KeePassXC 2.7.7 allows an attacker to recover some passwords stored in the .kdbx database.
ALT-PU-2024-18233: package `keepassxc` update to version 2.7.8-alt1
6.5 Medium
CVSS3