High severity7.5NVD Advisory· Published Jan 23, 2017· Updated Jun 17, 2026

CVE-2016-5119

Description

The automatic update feature in KeePass 2.33 and earlier allows man-in-the-middle attackers to execute arbitrary code by spoofing the version check response and supplying a crafted update.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Keepass/Keepass2 versions
cpe:2.3:a:keepass:keepass:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:keepass:keepass:*:*:*:*:*:*:*:*range: <=2.33
- (no CPE)range: <=2.33

Patches

Vulnerability mechanics

References

sourceforge.net/p/keepass/discussion/329220/thread/e430cc12/nvdPatchProduct
bogner.sh/2016/03/mitm-attack-against-keepass-2s-update-check/nvdExploitTechnical Description
packetstormsecurity.com/files/137274/KeePass-2-Man-In-The-Middle.htmlnvdThird Party Advisory

News mentions

No linked articles in our index yet.

cvss	0.488
epss	0.002
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000