Which of the following BEST represents a true virtual machine escape?

The correct answer is D. An attacker who has compromised a virtual machine, able to directly execute code on the. Neither VMcat nor patched VME services are VME escapes, but they are moving in that direction. A 鈥true鈥 VME escape would let an attacker run code inside the guest that would somehow escape the guest and begin running on the underlying host itself. Connecting to a share on the…

Vulnerability Exploitation & Privilege Escalation

Question

Options

AAn attacker who has compromised a virtual machine using VMcat to run code on the physical
BAn attacker who has compromised a virtual machine mapping a network drive on the physical
CAn attacker who has compromised a virtual machine sniffing network traffic to and from the
DAn attacker who has compromised a virtual machine, able to directly execute code on the

How the community answered

(39 responses)

A
8% (3)
B
15% (6)
C
5% (2)
D
72% (28)

Explanation

Neither VMcat nor patched VME services are VME escapes, but they are moving in that direction. A 鈥true鈥 VME escape would let an attacker run code inside the guest that would somehow escape the guest and begin running on the underlying host itself. Connecting to a share on the host and sniffing network traffic do not constitute a VM escape.

Topics

#VM escape#virtualization security#hypervisor attack#guest-to-host breakout

Community Discussion

No community discussion yet for this question.

Full GCIH Practice