Skip to content
OpenAdvisories
High · 8.1 CVE-2023-34758 CVE-2023-35170EUVD-2023-1750GHSA-8jxm-xp43-qh3qGO-2023-1866

Silver vulnerable to MitM attack against implants due to a cryptography vulnerability

Published Aug 28, 2023 · Updated Oct 2, 2024 · Assigned by mitre

Package: github.com/bishopfox/sliver Ecosystem: Go

Description

Sliver from v1.5.x to v1.5.39 has an improper cryptographic implementation, which allows attackers to execute a man-in-the-middle attack via intercepted and crafted responses.

Affected packages

EcosystemPackageAffectedFixedRecord
Go github.com/bishopfox/sliver >= 1.5.0, < 1.5.40 1.5.40 GHSA-8jxm-xp43-qh3q

References