Security Researcher at CrowdStrike claims VENOM vulnerability leaves millions of virtual machines vulnerable to cyber attacks. The vulnerability may allow an attacker to escape from the confines of an affected virtual machine (VM) guest and potentially obtain code-execution access to the host. CrowdStrike will not release a proof of concept exploit code. Amazon Cloud providers have already released patches and advisories for the flaw. Cloud providers like Amazon have promptly provided a fix for the vulnerability, CrowdStrike have been working with principal software vendors to develop a patch.”]
Source: https://securityaffairs.co/wordpress/36787/hacking/venom-vulnerability.html