جزئیات آسیب‌پذیری
CVE-2026-118673
KeePassXC: Out-of-bounds write in browser integration response encryption with oversized database responses
خلاصه‌ی فارسی
خلاصه‌ی فارسی برای این آسیب‌پذیری هنوز تهیه نشده است.
شرح رسمی (انگلیسی)
KeePassXC is a cross-platform community-driven port of the Windows application KeePass Password Safe. From 2.3.0 until 2.8.0, KeePassXC browser integration encrypts authorized responses in src/browser/BrowserMessageBuilder.cpp using a fixed 1 MiB output vector even though Botan::Sodium::crypto_box_easy() writes the plaintext length plus crypto_box_MACBYTES. A browser-protocol client that can access the per-user IPC endpoint, has a valid database association, and causes an unlocked database to generate and encrypt a sufficiently large authorized response can trigger a sequential out-of-bounds write before any response is delivered. This issue is fixed in version 2.8.0.
امتیازهای CVSS
| امتیاز | نسخه | منبع | بردار |
|---|---|---|---|
| 4.1متوسط | 4.0 | CVEProject cvelistV5 (CNA) (GitHub_M) | CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:P/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N |
محصولات آسیب‌پذیر
| فروشنده | محصول | نسخه‌ها | منبع |
|---|---|---|---|
| keepassxreboot | keepassxc | >= 2.3.0, < 2.8.0 | CVEProject cvelistV5 (CNA) |
منابع و راهنماها
۴- https://github.com/keepassxreboot/keepassxc/pull/13679 x_refsource_MISC
- https://github.com/keepassxreboot/keepassxc/commit/80e68bb4e8b89e383dd96b1bf5de169ca61367aa x_refsource_MISC
- https://github.com/keepassxreboot/keepassxc/releases/tag/2.8.0 x_refsource_MISC
- https://github.com/keepassxreboot/keepassxc/security/advisories/GHSA-3448-gh8j-3227 x_refsource_CONFIRM
اطلاعات
- تاریخ انتشار
- ۱۴۰۵/۰۸/۰۷
- آخرین به‌روزرسانی
- ۱۴۰۵/۰۸/۱۲
- وضعیت
- PUBLISHED
- صادرکننده (CNA)
- GitHub_M
- اولویت کلون
- به‌زودی
پیش‌بینی بهره‌برداری (EPSS)
ارزیابی SSVC (CISA)
- Automatable
- no
- Exploitation
- poc
- Technical Impact
- partial
ضعف‌ها (CWE)
- CWE-787Out-of-bounds Write