Phying News
P非影 中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

[CVE-2020-27675] Compromising virtualization without attacking the hypervisor

theori.io | vulnerability | CVE-2020-27675 | #linux-kernel | #virtualization | #hypervisor | #xen | #cve-2020-27675 | #xsa-331

Summary

CVE-2020-27675 (XSA-331): a DoS and potential out-of-bounds write in Linux's Xen paravirtualization driver — how virtualization platforms can be compromised without attacking the hypervisor directly.
Published
Collected

original ↗

Related coverage

  1. Xen exploitation part 3: XSA-182, Qubes escape (blog.quarkslab.com)
  2. On the fly virtualization with Cappsule (blog.quarkslab.com)
  3. Deep Dive into RCU Race Condition: Analysis of TCP-AO UAF (CVE-2024–27394) (theori.io)
  4. Linux Kernel Exploit (CVE-2022–32250) with mqueue (theori.io)
  5. PageJack in Action: CVE-2022-0995 exploit (blog.quarkslab.com)
  6. Kernel-hack-drill and a new approach to exploiting CVE-2024-50264 in the Linux kernel (swarm.ptsecurity.com)

back