Bug#913137: virtualbox: VirtualBox E1000 Guest-to-Host Escape

2018-11-08 Thread Evgeny Kapun
Control: severity -1 critical Raising severity because this bug can be used by any local user to elevate privileges. Also, before this bug is fixed upstream, it is possible to use this patch as a band-aid: --- a/src/VBox/Devices/Network/DevE1000.cpp +++ b/src/VBox/Devices/Network/DevE1000.cpp

Bug#913137: virtualbox: VirtualBox E1000 Guest-to-Host Escape

2018-11-07 Thread Salvatore Bonaccorso
Source: virtualbox Version: 5.2.20-dfsg-3 Severity: grave Tags: security upstream Justification: user security hole Hi See https://github.com/MorteNoir1/virtualbox_e1000_0day for the respective report. Regards, Salvatore