CVE-2023-35170

Description

Silver vulnerable to MitM attack against implants due to a cryptography vulnerability in github.com/bishopfox/sliver

Predictions

Heuristic predictions, AS-IS, for prioritization only.

Mitigations

No vendor mitigations ingested yet for this CVE. The mitigation-content worker queues fetches as references arrive — check back in a few minutes, or see the references list below.

References

• https://github.com/BishopFox/sliver/security/advisories/GHSA-8jxm-xp43-qh3q
• https://nvd.nist.gov/vuln/detail/CVE-2023-34758
• https://nvd.nist.gov/vuln/detail/CVE-2023-35170
• https://github.com/BishopFox/sliver/commit/2d1ea6192cac2ff9d6450b2d96043fdbf8561516
• https://github.com/BishopFox/sliver
• https://github.com/BishopFox/sliver/blob/master/implant/sliver/cryptography/crypto.go
• https://github.com/BishopFox/sliver/blob/master/implant/sliver/cryptography/implant.go
• https://github.com/BishopFox/sliver/releases/tag/v1.5.40
• https://github.com/tangent65536/Slivjacker
• https://pkg.go.dev/vuln/GO-2023-1866
• https://www.chtsecurity.com/news/04f41dcc-1851-463c-93bc-551323ad8091
• https://github.com/advisories/GHSA-8jxm-xp43-qh3q

💬 Discuss CVE-2023-35170 on VIR Community →

Community-verified mitigations for this CVE will appear above when contributors publish them.