CVE-2024-33901

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2024-33901
Issue in KeePassXC 2.7.7 allows an attacker (who has the privileges of the victim) to recover some passwords stored in the .kdbx database via a memory dump. NOTE: the vendor disputes this because memory-management constraints make this unavoidable in the current design and other realistic designs.

6.5 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 2.8 / Impact : 3.6

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact NONE

Availability Impact NONE

Scope UNCHANGED

References
Link Resource
https://gist.github.com/Fastor01/30c6d89c842feb1865ec2cd2d3806838 Exploit
https://github.com/keepassxreboot/keepassxc/issues/10784 Issue Tracking
https://keepassxc.org/blog/ Release Notes
https://keepassxc.org/blog/2019-02-21-memory-security/ Product
https://gist.github.com/Fastor01/30c6d89c842feb1865ec2cd2d3806838 Exploit
https://github.com/keepassxreboot/keepassxc/issues/10784 Issue Tracking
https://keepassxc.org/blog/ Release Notes
https://keepassxc.org/blog/2019-02-21-memory-security/ Product
Configurations

Configuration 1 (hide)

cpe:2.3:a:keepassxc:keepassxc:2.7.7:*:*:*:*:*:*:*
History

13 Jun 2025, 16:13

Type Values Removed Values Added
CPE cpe:2.3:a:keepassxc:keepassxc:2.7.7:*:*:*:*:*:*:*
First Time Keepassxc keepassxc
Keepassxc
References () https://gist.github.com/Fastor01/30c6d89c842feb1865ec2cd2d3806838 - () https://gist.github.com/Fastor01/30c6d89c842feb1865ec2cd2d3806838 - Exploit
References () https://github.com/keepassxreboot/keepassxc/issues/10784 - () https://github.com/keepassxreboot/keepassxc/issues/10784 - Issue Tracking
References () https://keepassxc.org/blog/ - () https://keepassxc.org/blog/ - Release Notes
References () https://keepassxc.org/blog/2019-02-21-memory-security/ - () https://keepassxc.org/blog/2019-02-21-memory-security/ - Product

21 Nov 2024, 09:17

Type Values Removed Values Added
References () https://gist.github.com/Fastor01/30c6d89c842feb1865ec2cd2d3806838 - () https://gist.github.com/Fastor01/30c6d89c842feb1865ec2cd2d3806838 -
References () https://github.com/keepassxreboot/keepassxc/issues/10784 - () https://github.com/keepassxreboot/keepassxc/issues/10784 -
References () https://keepassxc.org/blog/ - () https://keepassxc.org/blog/ -
References () https://keepassxc.org/blog/2019-02-21-memory-security/ - () https://keepassxc.org/blog/2019-02-21-memory-security/ -

01 Aug 2024, 13:52

Type Values Removed Values Added
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 6.5
CWE CWE-316

29 Jul 2024, 15:15

Type Values Removed Values Added
Summary
  • (es) Un problema en KeePassXC 2.7.7 permite a un atacante recuperar algunas contraseñas almacenadas en la base de datos .kdbx.

21 May 2024, 17:15

Type Values Removed Values Added
Summary (en) Issue in KeePassXC 2.7.7 allows an attacker to recover some passwords stored in the .kdbx database. (en) Issue in KeePassXC 2.7.7 allows an attacker (who has the privileges of the victim) to recover some passwords stored in the .kdbx database via a memory dump. NOTE: the vendor disputes this because memory-management constraints make this unavoidable in the current design and other realistic designs.
References
  • () https://github.com/keepassxreboot/keepassxc/issues/10784 -
  • () https://keepassxc.org/blog/2019-02-21-memory-security/ -

20 May 2024, 21:15

Type Values Removed Values Added
New CVE
Information

Published : 2024-05-20 21:15

Updated : 2025-06-13 16:13

NVD link : CVE-2024-33901

Mitre link : CVE-2024-33901

CVE.ORG link : CVE-2024-33901

JSON object : View

Products Affected

keepassxc

  • keepassxc
CWE
CWE-316

Cleartext Storage of Sensitive Information in Memory