Sliver from v1.5.x to v1.5.39 has an improper cryptographic implementation, which allows attackers to execute a man-in-the-middle attack via intercepted and crafted responses.
References
| Link | Resource |
|---|---|
| https://github.com/BishopFox/sliver/releases/tag/v1.5.40 | Release Notes |
| https://github.com/advisories/GHSA-8jxm-xp43-qh3q | Third Party Advisory |
| https://github.com/tangent65536/Slivjacker | Broken Link |
| https://www.chtsecurity.com/news/04f41dcc-1851-463c-93bc-551323ad8091 | Third Party Advisory |
Configurations
History
12 Sep 2023, 19:39
| Type | Values Removed | Values Added |
|---|---|---|
| CPE | cpe:2.3:a:bishopfox:sliver:*:*:*:*:*:*:*:* | |
| First Time |
Bishopfox sliver
|
01 Sep 2023, 13:57
| Type | Values Removed | Values Added |
|---|---|---|
| CPE | cpe:2.3:a:bishopfox:silver:*:*:*:*:*:*:*:* | |
| CWE | CWE-327 | |
| First Time |
Bishopfox silver
Bishopfox |
|
| References | (MISC) https://github.com/BishopFox/sliver/releases/tag/v1.5.40 - Release Notes | |
| References | (MISC) https://github.com/tangent65536/Slivjacker - Broken Link | |
| References | (MISC) https://www.chtsecurity.com/news/04f41dcc-1851-463c-93bc-551323ad8091 - Third Party Advisory | |
| References | (MISC) https://github.com/advisories/GHSA-8jxm-xp43-qh3q - Third Party Advisory | |
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 8.1 |
28 Aug 2023, 13:07
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2023-08-28 12:15
Updated : 2023-12-10 15:14
NVD link : CVE-2023-34758
Mitre link : CVE-2023-34758
CVE.ORG link : CVE-2023-34758
JSON object : View
Products Affected
bishopfox
- sliver
CWE
CWE-327
Use of a Broken or Risky Cryptographic Algorithm