How to protect against zero-day vulnerability in VirtualBox

by | Nov 9, 2018

ETIQUETAS: Hot news | Security

Security researcher Sergey Zelenyuk has discovered a zero-day vulnerability in VirtualBox, the Open Source virtualization software developed by Oracle. This failure allows malware to leave the virtual machine and execute malicious code on the host OS that runs the VirtualBox process.

A memory corruption problem affecting the Intel PRO / 1000 MT Desktop network card (82540EM) (E1000) when the network mode is set to NAT is the cause of this vulnerability. It is independent of the operating system of both the host and the virtual machine, so users of any OS could be in danger.

According to Zelenyuk, all versions of VirtualBox prior to the newly released 5.2 have this security flaw, which is found in the default configuration of all virtual machines. The security expert published this video in which he explains this vulnerability in detail and how to exploit it.

To protect against possible attacks, it is recommended to update to the new version of VirtualBox that has been released today. It can be downloaded from the official VirtualBox website *.

Source: Tekcrispy.



Submit a Comment

Your email address will not be published. Required fields are marked *

Recent posts

VDI: The most secure environment for hybrid working

Today is Data Privacy Day. The purpose of this date is to raise awareness and promote privacy and data protection best practices. It was initiated by the European Commission, the Council of Europe, and the Data Protection authorities of the European Union’s member states. Their main goal was to drive attention to the importance of privacy, user data protection, and compliance of the General Data Protection Regulation (RGPD). It is a regulation characterized by significant fines for non-compliance since its implementation in 2018.

How to avoid issues with virtual machines

Virtualization comes with a wide range of benefits for organizations. It helps cut IT costs and reduces downtime while increasing efficiency and productivity. It also increases the resiliency of networks, primarily when disasters occur, and promotes more green-friendly operations.

However, using virtual machines also comes with a set of downsides. Information security may get compromised, workloads mixed up, separation duties lost, among other issues. It is vital to know how you can get over these problems, and that’s what this article will discuss.

Let’s get started.

Top 5 articles on VDI technology of the year 2021

After the Christmas holidays, we return to our blog posts, looking back and reviewing the most read news during the year that just ended. As you may know, the main topic we deal with is desktop virtualization (VDI), although we also echo articles on virtualization in general, cybersecurity or Open Source that may be interesting for our audience. The news about our UDS Enterprise VDI software, virtual applications and remote access take on special prominence, as well as the announcements related to our partner channel and our technological alliances.


Stay up to date with all the news from UDS ENTERPRISE through our social networks. Follow us!

Skip to content