Hi All!
I haven't tested this myself yet, but it seems that someone has found a bug that allows escaping VBOX from guest to host.
Here is a link to the full writeup, there is code in there but it's not ready-made for people to just go and use, as the code is within the writeup:
https://github.com/MorteNoir1/virtualbox_e1000_0day
And the video showing the escape working:
https://vimeo.com/299325088
VBOX Sandbox Escape - Guest to Host
-
- Posts: 157
- Joined: Sun May 01, 2011 4:33 pm
- Location: Los Angeles, CA
- Contact:
Re: VBOX Sandbox Escape - Guest to Host
Looks like VMWare products were compromised too:
https://www.vmware.com/security/advisor ... -0027.html
https://www.securityweek.com/vmware-pat ... ng-contest
https://www.vmware.com/security/advisor ... -0027.html
https://www.securityweek.com/vmware-pat ... ng-contest