Skip to content
OpenAdvisories

Package · Debian

keepass2

4 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

4 results · Feed

  • Low 3.3
    CVE-2026-86776

    KeePass 2.35 through 2.61.1 Memory Exhaustion via KDBX Header Field Size

    KeePass versions 2.35 through 2.61.1 fail to validate KDBX header field sizes before memory allocation in the ReadHeaderField function. Attackers can craft a malicious KDBX file declaring excessive header field lengths to trigger allocation of gigabytes of me…

    KeePass KeePass keepass2 keepass2 Debian Ubuntu
  • High 7.5
    CVE-2023-32784 Public exploit

    In KeePass 2.x before 2.54, it is possible to recover the cleartext master password from a memory dump, even when a wor…

    keepass2 keepass2 Debian Ubuntu
  • Unscored —
    CVE-2019-20184

    KeePass 2.4.1 allows CSV injection in the title field of a CSV export.

    keepass2 keepass2 Debian Ubuntu
  • Unscored —
    CVE-2016-5119

    The automatic update feature in KeePass 2.33 and earlier allows man-in-the-middle attackers to execute arbitrary code b…

    keepass2 Debian