VirtualBox E1000 Guest-to-Host Escape

Seems like Whonix uses pcnet network driver by default, still worth having it here

1 Like

wow interesting , thanks for sharing that.

wonder how we gonna fix that.

cc @Patrick @HulaHoop

one guy in IRC mentioned that exploitation as well and posted this link: (Russian Language):

https://habr.com/post/429004/

Though according to IRC guy , he said Whonix might not getting effected by this since its using another network card.

A solution is to change the virtual hardware the VBox OVA uses to virtio (whih they support I think). I am not familiar with VBox’s innards to assist more.

1 Like

seems vbox fixed their vulnerability:

1 Like