Ouroboros: Tearing Xen Hypervisor With the Snake
summary
Describes a critical verification-bypass vulnerability in the Xen hypervisor that allows a paravirtualized (PV) guest OS to escalate from issuing hypercalls to fully controlling the hypervisor and other guests. Covers the attack surface in Xen’s PV hypercall handling, specific exploitation vectors and payloads used to exploit the flaw, and the resulting ability to compromise the platform.
AI-written summary · about
related talks
55mLessons Learned from Eight Years of Breaking Hypervisors
54mPoacher Turned Gamekeeper: Lessons Learned from Eight Years of Breaking Hypervisors
25mOne Bit Flips, One Cloud Flops: Cross-VM Row Hammer Attacks...
33mByepervisor: How We Broke The PS5 Hypervisor
56mA Retrospective Case Study of VMware Guest-to-Host Escape Vulnerabilities
41mSecuring Your Xen-Based Cloud
23mHardening Hypervisors with Ombro
50mExploiting the Hyper-V IDE Emulator to Escape the Virtual Machine