Virtual machine escape

In computer security, virtual machine escape is the process of breaking out of a virtual machine and interacting with the host operating system.[1] A virtual machine is a "completely isolated guest operating system installation within a normal host operating system".[2] In 2008, a vulnerability (CVE-2008-0923) in VMware discovered by Core Security Technologies made VM escape possible on VMWare Workstation 6.0.2 and 5.5.4.[3][4] A fully working exploit labeled Cloudburst was developed by Immunity Inc. for Immunity CANVAS (commercial penetration testing tool).[5] Cloudburst was presented in Black Hat USA 2009.[6]

Previous known vulnerabilities

pagetable entries, to skip expensive re-validation in safe cases (e.g. clearing only Access/Dirty bits). The bits considered safe were too broad, and not actually safe.

References

  1. ↑ What is VM Escape? - The Lone Sysadmin
  2. ↑ "Virtual Machines: Virtualization vs. Emulation". Retrieved 2011-03-11.
  3. ↑ Core Security Technologies
  4. ↑ Researcher: Critical vulnerability found in VMware's desktop apps | ZDNet
  5. ↑ Hacking Tool Lets A VM Break Out And Attack Its Host - Dark Reading
  6. ↑ Black Hat ® Technical Security Conference: USA 2009 // Briefings

External links


This article is issued from Wikipedia - version of the 11/16/2016. The text is available under the Creative Commons Attribution/Share Alike but additional terms may apply for the media files.