Venom attacks virtual floppy drives Cloud ops take note.

dbit · 13-05-2015 02:13PM #1

http://www.darkreading.com/cloud/venom-zero-day-may-affect-thousands-of-cloud-virtualization-products/d/d-id/1320389?_mc=RSS_DR_EDT

I don't think i can recall one single time in 3.5 years of cloud support in VMware of ever using the floppy emu/drive for anything ?

dbit · 13-05-2015 02:17PM

This vulnerability does not affect Vmware or Hyper-V, so while significant, worldwide customer impact is “more limited”. Also, it was responsibly disclosed, so patches are likely in place already. Major service providers affected will patch quickly (We hope) .

esentially its not remote code execution it would be used if the attacker has a VM on the same host as you - Still powerful for recon and op-sec.

dbit · 13-05-2015 02:18PM

AWS is clean :-
https://aws.amazon.com/security/security-bulletins/XSA_Security_Advisory_CVE_2015_3456/

dbit · 14-05-2015 07:02AM

Fire Eye impacted as has redhat KVM for its virtual solution :-
https://www.fireeye.com/content/dam/fireeye-www/support/pdfs/fireeye-venom-vulnerability.pdf

Venom attacks virtual floppy drives Cloud ops take note.

Comments