YoVDO

Hunting and Exploiting Recursive MMIO Flaws in QEMU KVM

Offered By: Black Hat via YouTube

Tags

Black Hat Courses Cloud Computing Courses Exploit Development Courses Vulnerability Analysis Courses Security Research Courses

Course Description

Overview

Explore the security implications of recursive MMIO flaws in QEMU KVM hypervisors in this 22-minute Black Hat conference talk. Delve into the potential vulnerabilities that arise when MMIO VM-exit handlers are recursively called during DMA transfers, potentially compromising virtual device state machines or crashing the hypervisor. Gain insights into this understudied attack surface as the speakers analyze root causes, common consequences, and exploitability of recursive MMIO issues. Learn from the security research conducted on QEMU/KVM, a widely-used hypervisor in cloud computing environments, and understand the critical nature of these security concerns.

Syllabus

Hunting and Exploiting Recursive MMIO Flaws in QEMU KVM


Taught by

Black Hat

Related Courses

Attack on Titan M, Reloaded - Vulnerability Research on a Modern Security Chip
Black Hat via YouTube Attacks From a New Front Door in 4G & 5G Mobile Networks
Black Hat via YouTube AAD Joined Machines - The New Lateral Movement
Black Hat via YouTube Better Privacy Through Offense - How to Build a Privacy Red Team
Black Hat via YouTube Whip the Whisperer - Simulating Side Channel Leakage
Black Hat via YouTube