ZeroHour
DashboardNewsCVEsExploitsIncidentsAIBriefAnalyticsEntitiesWatchlistIOCsAsk the feedSourcesFeeds & APIKiosk mode
CyberScooppublished ()ingested @HowellONeill

Oracle issues patches for 10 'virtual machine escape' flaws in VirtualBox

criticalVulnerability exploited in the wildimportance 60CVE-2018-2698CVE-2018-2694CVE-2017-5753CVE-2017-5715CVE-2017-5754
Read the original
Tagscve-2018-2698cve-2018-2694cve-2017-5753cve-2017-5715cve-2017-5754vulnerability

Vulnerabilities mentionedAll →

CVEVulnerabilityCVSSEPSSFlagsAffectedExposurePublished
CVE-2017-5753
+2 in the same advisory: …5754 …5715
Systems with microprocessors utilizing speculative execution and branch prediction may allow unauthorized disclosure of information to an attacker with local us

Systems with microprocessors utilizing speculative execution and branch prediction may allow unauthorized disclosure of information to an attacker with local user access via a side-channel analysis.

NVD description · AI analysis pending		5.694% PoC
  • intel atom c
  • intel atom e
  • intel atom x3
  • +1 more
—
CVE-2018-2698
+1 in the same advisory: …2694
Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent:

Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). Supported versions that are affected are Prior to 5.1.32 and Prior to 5.2.6. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Oracle VM VirtualBox. CVSS 3.0 Base Score 8.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H).

NVD description · AI analysis pending		8.82%
  • oracle vm virtualbox
—
Full article555 words · extracted from cyberscoop.com · click to collapse
Skip to main content

Get our latest cybersecurity news first on Google.

Click here!

The "easily exploitable" vulnerabilities allow a hacker to stage a "virtual machine escape" to attack the host operating system.

(Open Grid Scheduler / Grid Engine / Flickr)

Enterprise tech giant Oracle released a collection of critical security patches this month to address 10 exploitable vulnerabilities in VirtualBox.

Both popular and powerful, VirtualBox is Oracle’s hypervisor, which allows users to run virtual machines on a user’s host operating system.

Affecting anyone using VirtualBox, the “easily exploitable” vulnerabilities allow a hacker to stage a “virtual machine escape” and attack the host operating system, TechRepublic reports.

The vulnerabilities are found in the core graphics framework that is mirrored between the host and guest machine. It affects all host operating systems, according to SecuriTeam. You can find an extensive and technical write-up of the exploits here.

The vulnerability in mirrored memory allows attackers to exploit the host operating system from the virtual machine.

This particular vulnerability, CVE-2018-2698, was found by independent security researcher Niklas Baumstark via Beyond Security’s SecuriTeam.

After Oracle issued patches and an announcement, Baumstark outlined the problems on Twitter:

CVE-2018-2698 is a powerful OOB read/write primitive in the (always-on) VBVA graphics component. It can be used to escape a VBox VM and escalate privs to SYSTEM on Windows 10 hosts. Since the patch is public now, definitely upgrade if you are running malicious code inside a VM. pic.twitter.com/2s4IWuNq3e

— Niklas B (@_niklasb) January 17, 2018

Oracle fixed some of my VBox bugs 🙂 CVE-2018-2694 was the macOS privilege escalation. strcpy into a fixed-size heap buffer… It's interesting this is even exploitable, my approach was to spray memory inside the guest which ends up at predictable addresses in the host process. pic.twitter.com/0A5doVXYnR

— Niklas B (@_niklasb) January 17, 2018

Oracle has a full list of vulnerabilities addressed by the January patches including patches addressing the Spectre (CVE-2017-5753, CVE-2017-5715) and Meltdown (CVE-2017-5754) Intel processor vulnerabilities. Oracle is monitoring the performance impact of the patches in much the same way that other major vendors, including Amazon and Microsoft, are doing.

Oracle urges all VirtualBox users to apply the latest patches.

Latest Podcasts

Text extracted automatically; images, tables and formatting may be missing. Original: https://cyberscoop.com/virtualbox-virtual-machine-escape-oracle/