Cette page suit l'état du correctif pour Debian. La vulnérabilité elle-même est décrite sur la page CVE principale.
Voir CVE-2016-5119 →
DEBIAN-CVE-2016-5119
The automatic update feature in KeePass 2.33 and earlier allows man-in-the-middle attackers to execute arbitrary code by spoofing the version check re...
Description d'origine
La description telle que publiée par la source (souvent en anglais).
The automatic update feature in KeePass 2.33 and earlier allows man-in-the-middle attackers to execute arbitrary code by spoofing the version check response and supplying a crafted update.
Source: OSV.dev (Open Source Vulnerabilities) OSV
Paquets affectés
Debian:12
keepass2
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.18+dfsg-1"}]}]
Debian:13
keepass2
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.18+dfsg-1"}]}]
Debian:14
keepass2
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.18+dfsg-1"}]}]
Références
- advisory security-tracker.debian.org