CVE-2024-33900: Medium severity keepassxc vulnerability
KeePassXC 2.7.7 allows an attacker (who has the privileges of the victim) to recover cleartext credentials via a memory dump. NOTE: the vendor disputes this because memory-management constraints make this unavoidable in the current design and other realistic designs.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-33900?
CVE-2024-33900 is rated as a high severity vulnerability due to the potential exposure of cleartext credentials.
How do I fix CVE-2024-33900?
Currently, there is no official fix for CVE-2024-33900, but users should consider monitoring for updates from KeePassXC for future patches.
What versions of KeePassXC are affected by CVE-2024-33900?
CVE-2024-33900 affects KeePassXC version 2.7.7 and potentially other versions with similar memory management issues.
What type of attack does CVE-2024-33900 enable?
CVE-2024-33900 allows attackers with victim privileges to recover sensitive cleartext credentials through memory dumps.
What is the vendor's stance on CVE-2024-33900?
The vendor disputes the severity of CVE-2024-33900, citing that memory management constraints make complete mitigation difficult in the current design.