Executive brief
Sliver Vulnerable to Pre-Auth Memory Exhaustion via NoEncoder Bypass
Affected products
- Go github.com/bishopfox/sliver
Junglewise Threat Intelligence
Sliver Vulnerable to Pre-Auth Memory Exhaustion via NoEncoder Bypass
Severity: medium · CVSS 4 · Published 2026-01-05
Technologies: github.com/bishopfox/sliver (Go). Vendors: Go.
Related threats
- GO-2026-4899 - Sliver: Nil Pointer Dereference in tunnelCloseHandler causes panic when a reverse tunnel (rportfwd) close is attempted in github.com/bishopf
- BishopFox Sliver unauthenticated remote access in MCP interface
- Sliver: Nil Pointer Dereference in tunnelCloseHandler causes panic when a reverse tunnel (rportfwd) close is attempted
- GO-2026-4723 - Sliver Vulnerable to Authenticated OOM via Memory Exhaustion in mTLS/WireGuard Transports in github.com/bishopfox/sliver
- GO-2026-4609 - Sliver is Vulnerable to Authenticated Nil-Pointer Dereference through its Handlers in github.com/bishopfox/sliver