EVOVX News Index

Xen Hypervisor Flaws Let One Malicious VM Read and Write Any Other VM's Memory

· thehackernews.com · popularity 20/100 · 0 similar stories today

Read the original at thehackernews.com →

Summary

Two flaws in the Xen hypervisor allow a malicious guest virtual machine (VM) to read and write the memory of other VMs on the same host, including dom0. Dom0 is the VM that, by default, has full permissions and manages the others. Patches are out, and there is no known mitigation, the Xen Project said in an advisory on November 3. All Xen versions from 4.6 onward are vulnerable,

Found in: The Hacker News. Rating basis: single outlet; outlet tier 2 (unlisted); 1 feeds; feed position 3.