Virtual machine security?

Questions about applications and software
Forum rules
Before you post please read how to get help
Post Reply
User avatar
12 Monkeys
Level 2
Level 2
Posts: 91
Joined: Fri Jan 03, 2014 6:46 pm

Virtual machine security?

Post by 12 Monkeys » Tue Oct 30, 2018 11:51 am

Hi!

Hope this is the right section. If not, move it.

This is a newbie- and also probably a stupid, question. When I/we use virtual machines, VmWare and virtualbox etc.
How insecure are we? They "sell" it as safe. Like you can blunder around in a vmachine. You guys know
I guess, what is the bleed over between the virtual and the actual? Do we feel a false safe security?
Can they easily use the virtual to get into my working box?
Personally I use the same amount of sec stuff for my machines that I do for the rest.

Would love some insight

Mikael
Image

gm10
Level 18
Level 18
Posts: 8216
Joined: Thu Jun 21, 2018 5:11 pm

Re: Virtual machine security?

Post by gm10 » Tue Oct 30, 2018 12:02 pm

It's never 100%, a number of VM escape vulnerabilities are getting found and fixed all the time. If you want to run risky software in a VM it's important to use the latest versions, not the ones from the repositories.

Just have a look at all the criticial security vulnerabilities fixed in Virtualbox this month: https://www.oracle.com/technetwork/secu ... pendixOVIR

User avatar
snowflake
Level 2
Level 2
Posts: 62
Joined: Tue Jul 03, 2018 12:52 pm

Re: Virtual machine security?

Post by snowflake » Tue Oct 30, 2018 1:29 pm

It depends on what you're doing in the virtual, my host crashed because of things I was doing in the virtual many times in the past, so I think there is no real 100% "safety by isolation", but yeah running a suspicious program/code in there ,is way more secure than running directly on the machine.
,

gm10
Level 18
Level 18
Posts: 8216
Joined: Thu Jun 21, 2018 5:11 pm

Re: Virtual machine security?

Post by gm10 » Wed Nov 07, 2018 11:07 am

On topic: Vbox escape 0day published a few hours ago: https://github.com/MorteNoir1/virtualbox_e1000_0day

Post Reply

Return to “Software & Applications”