x/vulndb: potential Go vuln in github.com/bishopfox/sliver: GHSA-hc5w-gxxr-w8x8

[GoVulnBot]

Advisory GHSA-hc5w-gxxr-w8x8 references a vulnerability in the following Go modules:

Module
github.com/bishopfox/sliver

Description:

Description

Sliver version 1.6.0 (prerelease) is vulnerable to RCE on the teamserver by a low-privileged "operator" user. The RCE is as the system root user.

Impact

As described in a past issue, "there is a clear security boundary between the operator and server, an operator should not inherently be able to run commands or code on the server." An operator who exploited this vulnerability would be able to view all console logs, kick all other operators, view and modify files stored on the server, and ultimately delete the server.

Repr...

References:

• ADVISORY: GHSA-hc5w-gxxr-w8x8
• ADVISORY: GHSA-hc5w-gxxr-w8x8
• FIX: BishopFox/sliver@0deaee6
• FIX: MSF Stager Advanced Options BishopFox/sliver#1281

Cross references:

• Module github.com/bishopfox/sliver appears in issue x/vulndb: potential Go vuln in github.com/bishopfox/sliver: GHSA-8jxm-xp43-qh3q #1866 NOT_IMPORTABLE

See doc/triage.md for instructions on how to triage this report.

id: GO-ID-PENDING
modules:
    - module: github.com/bishopfox/sliver
      non_go_versions:
        - introduced: TODO (earliest fixed "", vuln range ">= 1.5.40, <= 1.6.0-dev")
      vulnerable_at: 1.5.42
summary: Sliver Allows Authenticated Operator-to-Server Remote Code Execution in github.com/bishopfox/sliver
ghsas:
    - GHSA-hc5w-gxxr-w8x8
references:
    - advisory: https://github.com/BishopFox/sliver/security/advisories/GHSA-hc5w-gxxr-w8x8
    - advisory: https://github.com/advisories/GHSA-hc5w-gxxr-w8x8
    - fix: https://github.com/BishopFox/sliver/commit/0deaee625d14c6f05f63c86e5c3b7ae623a1138f
    - fix: https://github.com/BishopFox/sliver/pull/1281
source:
    id: GHSA-hc5w-gxxr-w8x8
    created: 2024-07-18T21:01:18.798953526Z
review_status: UNREVIEWED

[gopherbot]

Change https://go.dev/cl/599636 mentions this issue: data/reports: add 4 unreviewed reports

[gopherbot]

Change https://go.dev/cl/606360 mentions this issue: data/reports: regenerate 8 reports