CVE catalog

CVE-2017-1000066

keepass2: CVE-2017-1000066

[CVE catalog]

Severity
Low
Source
[NVD] · [CVE record]
EPSS
1.40% · Oct 25, 2026

The entry details view function in KeePass version 1.32 inadvertently decrypts certain database entries into memory, which may result in the disclosure of sensitive information.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Debiankeepass2sid2.60+dfsg-1not affected
Debiankeepass2forky2.60+dfsg-1not affected
Debiankeepass2trixie2.57+dfsg-3not affected
Debiankeepass2bookworm2.47+dfsg-2not affected

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
Debiankeepass2sourcesidNot affectedunimportantNot reportedNot reported
Debiankeepass2sourceforkyNot affectedunimportantNot reportedNot reported
Debiankeepass2sourcetrixieNot affectedunimportantNot reportedNot reported
Debiankeepass2sourcebookwormNot affectedunimportantNot reportedNot reported

OpenFactory catalog packages

[Debian 12 (Bookworm)]

  • [keepass2]Not affected
    Details (4)
    • 2.47+dfsg-2 · all · bookworm

      Not affected

      dsa · keepass2 · debian · bookworm

    • 2.47+dfsg-2 · all · bookworm

      Not affected

      dsa · keepass2 · debian · bookworm

    • 2.57+dfsg-1~bpo12+1 · all · bookworm-backports

      Not affected

      dsa · keepass2 · debian · bookworm

    • 2.57+dfsg-1~bpo12+1 · all · bookworm-backports

      Not affected

      dsa · keepass2 · debian · bookworm

  • [keepass2-doc]Not affected

    Source package: [keepass2]

    Details (4)
    • 2.47+dfsg-2 · all · bookworm

      Not affected

      dsa · keepass2 · debian · bookworm

    • 2.47+dfsg-2 · all · bookworm

      Not affected

      dsa · keepass2 · debian · bookworm

    • 2.57+dfsg-1~bpo12+1 · all · bookworm-backports

      Not affected

      dsa · keepass2 · debian · bookworm

    • 2.57+dfsg-1~bpo12+1 · all · bookworm-backports

      Not affected

      dsa · keepass2 · debian · bookworm

Observed:

References