VBOX Sandbox Escape - Guest to Host

All off-topic discussion goes here.
Post Reply
Cody Johnston
Posts: 157
Joined: Sun May 01, 2011 4:33 pm
Location: Los Angeles, CA
Contact:
Contact Cody Johnston

VBOX Sandbox Escape - Guest to Host

Post by Cody Johnston » Thu Nov 08, 2018 5:29 pm

Hi All!

I haven't tested this myself yet, but it seems that someone has found a bug that allows escaping VBOX from guest to host.

Here is a link to the full writeup, there is code in there but it's not ready-made for people to just go and use, as the code is within the writeup:

https://github.com/MorteNoir1/virtualbox_e1000_0day

And the video showing the escape working:

https://vimeo.com/299325088
Top
h00key
Posts: 14
Joined: Thu Jan 29, 2015 4:51 pm

Re: VBOX Sandbox Escape - Guest to Host

Post by h00key » Sat Nov 10, 2018 8:52 pm

Looks like VMWare products were compromised too:

https://www.vmware.com/security/advisor ... -0027.html

https://www.securityweek.com/vmware-pat ... ng-contest
Top
Post Reply

Return to “General Discussion”