Skip to content
OpenAdvisories

Package · Ubuntu

keepass2

4 known vulnerabilities.

4 results · Feed

  • Low 3.3

    KeePass 2.35 through 2.61.1 Memory Exhaustion via KDBX Header Field Size

    KeePass versions 2.35 through 2.61.1 fail to validate KDBX header field sizes before memory allocation in the ReadHeaderField function. Attackers can craft a malicious KDBX file declaring excessive header field lengths to trigger allocation of gigabytes of me…

  • High 7.5
    CVE-2023-32784 Public exploit

    In KeePass 2.x before 2.54, it is possible to recover the cleartext master password from a memory dump, even when a wor…

  • Unscored —
    CVE-2022-0725 Public exploit

    A flaw was found in keepass. The vulnerability occurs due to logging the plain text passwords in system log and leads t…

  • Unscored —

    KeePass 2.4.1 allows CSV injection in the title field of a CSV export.