Get the latest tech news

Arbitrary code execution in QubesOS via copy-to-VM error reporting backchannel


We have published Qubes Security Bulletin (QSB) 118: Dom0 arbitrary code execution in qvm-copy-to-vm error reporting. The text of this QSB and its accompanying cryptographic signatures are reproduced below, followed by a general explanation of this announcement and authentication instru...

None

Get the Android app

Or read this on Hacker News

Read more on:

Photo of copy

copy

Photo of QubesOS

QubesOS

Related news:

News photo

Apple Plans iPhone-to-Windows Copy and Paste in EU After Microsoft Request

News photo

Google Cache used to have a copy of this page at

News photo

Zero-copy in Go: sendfile, splice, and the cost of io.Copy