Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Venom – A security vulnerability in virtual floppy drive code

venom.crowdstrike.com

Post reply on HN
Print view View original

1–10 of 124 posts

Re: Venom – A security vulnerability in virtual floppy drive code

#2

Post by fulafel »

From Q&A:

"Q: How is this different from previous VM escape vulnerabilities?

A: Most VM escape vulnerabilities discovered in the past were only exploitable in non-default configurations or in configurations that wouldn’t be used in secured environments. Other VM escape vulnerabilities only applied to a single virtualization platform, or didn’t directly allow for arbitrary code execution."

Edit: Xen advisory: http://xenbits.xen.org/xsa/advisory-133.html

Re: Venom – A security vulnerability in virtual floppy drive code

#5

Post by mariusz79 »

"You've been smoking something really mind altering, and I think you should share it.

x86 virtualization is about basically placing another nearly full kernel, full of new bugs, on top of a nasty x86 architecture which barely has correct page protection. Then running your operating system on the other side of this brand new pile of shit."

The rest of the rant is here:

http://www.electricmonk.nl/log/2007/10/25/virtualization-sec...

Re: Venom – A security vulnerability in virtual floppy drive code

#8

Post by sneak »

brohee wrote: post #3

Amazon states that AWS is not vulnerable, no details but presumably they patched before the public disclosure. https://aws.amazon.com/security/security-bulletins/XSA_Secur...

We're all equal, but some are more equal than others.

This is the endgame of your so-called "responsible disclosure". Those with profit loss exposure win, and the peasants get it whenever the PR company is done making the logo and infographics.

Re: Venom – A security vulnerability in virtual floppy drive code

#9

Post by jeswin »

brohee wrote: post #3

Amazon states that AWS is not vulnerable, no details but presumably they patched before the public disclosure. https://aws.amazon.com/security/security-bulletins/XSA_Secur...

It would have been reassuring if they disclosed whether they were vulnerable earlier, and if it required a patch to be installed.

Re: Venom – A security vulnerability in virtual floppy drive code

#10

Post by rlpb »

brohee wrote: post #3

Amazon states that AWS is not vulnerable, no details but presumably they patched before the public disclosure. https://aws.amazon.com/security/security-bulletins/XSA_Secur...

The vulnerability is in floppy drive emulator code. It isn't clear to me whether all users are vulnerable or only hosts that have floppy drive devices defined [in their guests] are vulnerable.

If the latter, perhaps Amazon was never vulnerable anyway?

Post reply on HN