---
id: 8720
title: "Pandavirtualization: Exploiting the Xen hypervisor"
source_domain: projectzero.google
source_url: "https://projectzero.google/2017/04/pandavirtualization-exploiting-xen.html"
published_at: "2017-04-07T00:00:00Z"
tags: ["virtualization", "hypervisor", "vm-escape", "project-zero", "xen", "x86-64"]
phying_url: "https://phying.com/item/8720"
lang: en
---

# Pandavirtualization: Exploiting the Xen hypervisor

## Summary

A Project Zero report on a Xen hypervisor escape: an attacker controlling a paravirtualized x86-64 guest kernel could break out and control physical memory, patched in April 2017.

## Intelligence Metadata

- **Sources:** projectzero.google
- **Published:** 2017-04-07T00:00:00Z
- **Original:** https://projectzero.google/2017/04/pandavirtualization-exploiting-xen.html
- **Phying News:** https://phying.com/item/8720