CVE-2023-32784— KeePass 安全漏洞
获取后续新漏洞提醒登录后订阅
一、 漏洞 CVE-2023-32784 基础信息
漏洞信息
对漏洞内容有疑问？看看神龙的深度分析是否有帮助！
查看神龙十问 ↗ 尽管我们使用了先进的大模型技术，但其输出仍可能包含不准确或过时的信息。神龙努力确保数据的准确性，但请您根据实际情况进行核实和判断。
Vulnerability Title
N/A
来源: CVE Program / CVE List V5
Vulnerability Description
In KeePass 2.x before 2.54, it is possible to recover the cleartext master password from a memory dump, even when a workspace is locked or no longer running. The memory dump can be a KeePass process dump, swap file (pagefile.sys), hibernation file (hiberfil.sys), or RAM dump of the entire system. The first character cannot be recovered. In 2.54, there is different API usage and/or random string insertion for mitigation.
来源: CVE Program / CVE List V5
CVSS Information
N/A
来源: CVE Program / CVE List V5
Vulnerability Type
N/A
来源: CVE Program / CVE List V5
Vulnerability Title
KeePass 安全漏洞
来源: 中国国家信息安全漏洞库 CNNVD
Vulnerability Description
KeePass是一款开源的密码管理器。 KeePass 2.54之前的2.x版本存在安全漏洞，该漏洞源于即使工作区被锁定或不再运行，也可以从内存转储中恢复明文主密码。
来源: 中国国家信息安全漏洞库 CNNVD
CVSS Information
N/A
来源: 中国国家信息安全漏洞库 CNNVD
Vulnerability Type
N/A
来源: 中国国家信息安全漏洞库 CNNVD
受影响产品
| 厂商 | 产品 | 影响版本 | CPE | 订阅 |
|---|---|---|---|---|
| - | n/a | n/a | - |
二、漏洞 CVE-2023-32784 的公开POC
| # | POC 描述 | 源链接 | 神龙链接 |
|---|---|---|---|
| 1 | Original PoC for CVE-2023-32784 | https://github.com/vdohney/keepass-password-dumper | POC详情 |
| 2 | KeePass Master Password Extraction PoC for Linux | https://github.com/CTM1/CVE-2023-32784-keepass-linux | POC详情 |
| 3 | This script complements the results obtained through the keepass-password-dumper tool when exploiting the CVE-2023-32784 vulnerability affecting KeePass. | https://github.com/und3sc0n0c1d0/BruteForce-to-KeePass | POC详情 |
| 4 | KeePass 2.X dumper (CVE-2023-32784) | https://github.com/z-jxy/keepass_dump | POC详情 |
| 5 | A CVE-2023-32784 proof-of-concept implementation in Rust | https://github.com/LeDocteurDesBits/cve-2023-32784 | POC详情 |
| 6 | Re-write of original KeePass 2.X Master Password Dumper (CVE-2023-32784) POC in python. | https://github.com/hau-zy/KeePass-dump-py | POC详情 |
| 7 | Retrieve the master password of a keepass database <= 2.53.1 | https://github.com/dawnl3ss/CVE-2023-32784 | POC详情 |
| 8 | None | https://github.com/ValentinPundikov/poc-CVE-2023-32784 | POC详情 |
| 9 | None | https://github.com/mister-turtle/cve-2023-32784 | POC详情 |
| 10 | year 2 semester 1 Systems and Network Programming Assignment | https://github.com/Cmadhushanka/CVE-2023-32784-Exploitation | POC详情 |
| 11 | None | https://github.com/le01s/poc-CVE-2023-32784 | POC详情 |
| 12 | A Python console program that exploits the security vulnerability CVE-2023-32784 in the password manager KeePass. This exploit reconstructs the master password in plain text based on memory dumps (.DMP). | https://github.com/SarahZimmermann-Schmutzler/exploit_keepass | POC详情 |
| 13 | None | https://github.com/dev0558/CVE-2023-32784-EXPLOIT-REPORT | POC详情 |
| 14 | After using the KeePass password dumper maybe some character parsed as ● is incorrect and you want to know the real character | https://github.com/G4sp4rCS/CVE-2023-32784-password-combinator-fixer | POC详情 |
AI 生成 POC高级
未找到公开 POC。
登录以生成 AI POC三、漏洞 CVE-2023-32784 的情报信息
请登录查看更多情报信息。
CVE-2023-32784 其他参考 (3)
同批安全公告 · n/a · 2023-05-15 · 共 54 条
| CVE-2023-2124 | Linux kernel 缓冲区错误漏洞 | |
| CVE-2023-1729 | Libraw 缓冲区错误漏洞 | |
| CVE-2023-21104 | Google Android 安全漏洞 | |
| CVE-2023-20930 | Google Android 资源管理错误漏洞 | |
| CVE-2023-21102 | Google Android 安全漏洞 | |
| CVE-2023-21103 | Google Android 安全漏洞 | |
| CVE-2023-20914 | Google Android 安全漏洞 | |
| CVE-2023-21116 | Google Android 安全漏洞 | |
| CVE-2023-21117 | Google Android 安全漏洞 | |
| CVE-2023-21118 | Google Android 缓冲区错误漏洞 | |
| CVE-2023-21112 | Google Android 缓冲区错误漏洞 | |
| CVE-2023-2700 | Red Hat libvirt 安全漏洞 | |
| CVE-2023-30245 | Judging Management System SQL注入漏洞 | |
| CVE-2023-29861 | Teledyne FLIR FLIR-DVTEL camera 安全漏洞 | |
| CVE-2023-31607 | Virtuoso Open-Source Edition SQL注入漏洞 | |
| CVE-2023-31608 | Virtuoso Open-Source Edition SQL注入漏洞 | |
| CVE-2023-31609 | Virtuoso Open-Source Edition SQL注入漏洞 | |
| CVE-2023-31610 | Virtuoso Open-Source Edition SQL注入漏洞 | |
| CVE-2023-31611 | Virtuoso Open-Source Edition SQL注入漏洞 | |
| CVE-2023-31612 | Virtuoso Open-Source Edition SQL注入漏洞 |
显示前 20 条，共 54 条。 查看全部 → →
IV. Related Vulnerabilities
V. Comments for CVE-2023-32784
暂无评论