Phying News
P非影 中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

[CVE-2015-7835] Xen exploitation part 2: XSA-148, from guest to host

blog.quarkslab.com | advisory | CVE-2015-7835 | #exploitation | #cve | #vm-escape | #paravirtualization | #quarkslab | #xen

Summary

Exploiting Xen XSA-148 (CVE-2015-7835): a page-table bug lets x86 paravirtualized guests execute arbitrary code in dom0; explains the vulnerability and develops a full working exploit.
Published
Collected

original ↗

Related coverage

  1. Xen exploitation part 1: XSA-105, from nobody to root (blog.quarkslab.com)
  2. Xen exploitation part 3: XSA-182, Qubes escape (blog.quarkslab.com)
  3. CVE-2018-6924: FreeBSD ELF Header Parsing Kernel Memory Disclosure (blog.quarkslab.com)
  4. Defeating AI-Assisted Reverse Engineering (or at Least Trying To) (blog.quarkslab.com)
  5. From P-Code to GNN: extract binary code semantics (blog.quarkslab.com)
  6. Quarkslab Internship Offers for 2019-2020 (blog.quarkslab.com)

back