Unverified50% confidenceFactExact time
2015年的VENOM漏洞中，攻击者通过虚拟软盘控制器的缓冲区溢出实现了完整的VM逃逸
1
Sources
50%
Confidence
Long-term
Relevance
7/11/2026
First Seen
Sources
Google's $250K Bounty: Linux VM Escape Vulnerability Sets a Historic Record
redditr/programming7/9/2026
Related Claims
Unverified2015年曝光的VENOM漏洞（CVE-2015-3456）通过向QEMU模拟的虚拟软盘控制器发送特制I/O命令触发堆溢出，实现从Guest到Host的完整VM逃逸82% similarUnverified虚拟机逃逸是指攻击者从受控的客户机内部突破隔离屏障，获得对宿主机或同物理主机上其他VM的访问权限79% similarUnverified2017年Pwn2Own大赛中选手通过链式漏洞逃出VMware虚拟机72% similarUnverifiedThe VENOM vulnerability (CVE-2015-3456) discovered in 2015 exploited a buffer overflow in QEMU's virtual floppy disk controller, affecting mainstream virtualization platforms including Xen, KVM, and VirtualBox.71% similarUnverifiedVirtual machines simulate a complete computing environment at the hardware level through a Hypervisor, and there have historically been multiple virtual machine escape vulnerabilities (such as the Venom vulnerability).71% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/477360API
curl https://kongchang.com/api/v1/knowledge/claims/477360MCP
get_claim(id=477360)