CVE-2023-34758

Description

Sliver from v1.5.x to v1.5.39 has an improper cryptographic implementation, which allows attackers to execute a man-in-the-middle attack via intercepted and crafted responses.

Reserved 2023-06-07 | Published 2023-08-28 | Updated 2024-10-02 | Assigner mitre

References

github.com/tangent65536/Slivjacker

github.com/advisories/GHSA-8jxm-xp43-qh3q

github.com/BishopFox/sliver/releases/tag/v1.5.40

www.chtsecurity.com/.../04f41dcc-1851-463c-93bc-551323ad8091

cve.org (CVE-2023-34758)

nvd.nist.gov (CVE-2023-34758)

Download JSON