Sliver from v1.5.x to v1.5.39 has an improper cryptographic implementation, which allows attackers to execute a man-in-the-middle attack via intercepted and crafted responses.
References
Link | Resource |
---|---|
https://github.com/BishopFox/sliver/releases/tag/v1.5.40 | Release Notes |
https://github.com/advisories/GHSA-8jxm-xp43-qh3q | Third Party Advisory |
https://github.com/tangent65536/Slivjacker | Broken Link |
https://www.chtsecurity.com/news/04f41dcc-1851-463c-93bc-551323ad8091 | Third Party Advisory |
Configurations
History
12 Sep 2023, 19:39
Type | Values Removed | Values Added |
---|---|---|
CPE | cpe:2.3:a:bishopfox:sliver:*:*:*:*:*:*:*:* | |
First Time |
Bishopfox sliver
|
01 Sep 2023, 13:57
Type | Values Removed | Values Added |
---|---|---|
CPE | cpe:2.3:a:bishopfox:silver:*:*:*:*:*:*:*:* | |
First Time |
Bishopfox
Bishopfox silver |
|
CWE | CWE-327 | |
CVSS |
v2 : v3 : |
v2 : unknown
v3 : 8.1 |
References | (MISC) https://github.com/BishopFox/sliver/releases/tag/v1.5.40 - Release Notes | |
References | (MISC) https://github.com/tangent65536/Slivjacker - Broken Link | |
References | (MISC) https://github.com/advisories/GHSA-8jxm-xp43-qh3q - Third Party Advisory | |
References | (MISC) https://www.chtsecurity.com/news/04f41dcc-1851-463c-93bc-551323ad8091 - Third Party Advisory |
28 Aug 2023, 13:07
Type | Values Removed | Values Added |
---|---|---|
New CVE |
Information
Published : 2023-08-28 12:15
Updated : 2024-02-28 20:33
NVD link : CVE-2023-34758
Mitre link : CVE-2023-34758
CVE.ORG link : CVE-2023-34758
JSON object : View
Products Affected
bishopfox
- sliver
CWE
CWE-327
Use of a Broken or Risky Cryptographic Algorithm