tag:blogger.com,1999:blog-3932878064881956934.post7496832723622885651..comments2023-05-22T19:36:11.633+05:30Comments on voidsecurity: From Compiler Optimization to Code Execution - VirtualBox VM Escape - CVE-2018-2844Reno Roberthttp://www.blogger.com/profile/01980174423078410529noreply@blogger.comBlogger10125tag:blogger.com,1999:blog-3932878064881956934.post-81051335197971773162018-11-01T21:38:35.985+05:302018-11-01T21:38:35.985+05:30Thanks!Thanks!Reno Roberthttps://www.blogger.com/profile/01980174423078410529noreply@blogger.comtag:blogger.com,1999:blog-3932878064881956934.post-11778261306185952692018-11-01T21:38:25.080+05:302018-11-01T21:38:25.080+05:30I didn't check the recent one, but VRAM is RWX...I didn't check the recent one, but VRAM is RWX even in 5.2.x based on this post https://blogs.securiteam.com/index.php/archives/3736Reno Roberthttps://www.blogger.com/profile/01980174423078410529noreply@blogger.comtag:blogger.com,1999:blog-3932878064881956934.post-54419725599493262942018-09-11T14:31:41.210+05:302018-09-11T14:31:41.210+05:30Very nice work Very nice work Anonymousnoreply@blogger.comtag:blogger.com,1999:blog-3932878064881956934.post-68545202272174220582018-09-11T13:52:17.073+05:302018-09-11T13:52:17.073+05:30Do the vbox newer version still have VRAM remainin...Do the vbox newer version still have VRAM remaining rwx? Or Oracle fixed it?Anonymoushttps://www.blogger.com/profile/16086480983574146551noreply@blogger.comtag:blogger.com,1999:blog-3932878064881956934.post-45101842695467452532018-08-31T10:17:32.109+05:302018-08-31T10:17:32.109+05:30Valentin,
The relative offset between VRAM and VB...Valentin,<br /><br />The relative offset between VRAM and VBoxDD.so remains the same in the Ubuntu host I tested. There is no randomization between shared libs/mmap'ed pages etc or load order randomization.Reno Roberthttps://www.blogger.com/profile/01980174423078410529noreply@blogger.comtag:blogger.com,1999:blog-3932878064881956934.post-60377030260849593212018-08-30T11:27:53.001+05:302018-08-30T11:27:53.001+05:30Thanks for post)
I have a question. What is about ...Thanks for post)<br />I have a question. What is about relative offset between VRAM and VBoxDD.so because of ASLR affects them or not?Valentin Shilnenkovhttps://www.blogger.com/profile/09846698158007506540noreply@blogger.comtag:blogger.com,1999:blog-3932878064881956934.post-75956245083545036032018-08-29T21:53:22.350+05:302018-08-29T21:53:22.350+05:30Thanks!Thanks!Reno Roberthttps://www.blogger.com/profile/01980174423078410529noreply@blogger.comtag:blogger.com,1999:blog-3932878064881956934.post-78450714841788513812018-08-29T21:53:04.014+05:302018-08-29T21:53:04.014+05:30Thanks!Thanks!Reno Roberthttps://www.blogger.com/profile/01980174423078410529noreply@blogger.comtag:blogger.com,1999:blog-3932878064881956934.post-78950703127176509022018-08-29T13:43:02.206+05:302018-08-29T13:43:02.206+05:30just awesomejust awesomenullptrhttps://www.blogger.com/profile/11186103388271684699noreply@blogger.comtag:blogger.com,1999:blog-3932878064881956934.post-44116049167121351572018-08-29T08:07:20.721+05:302018-08-29T08:07:20.721+05:30excellentexcellent3n4t5yu6iohttps://www.blogger.com/profile/12453150270310506192noreply@blogger.com