{"id":7713,"date":"2015-05-14T01:10:40","date_gmt":"2015-05-14T07:10:40","guid":{"rendered":"https:\/\/www.siteground.com\/blog\/?p=7713"},"modified":"2025-09-18T14:49:20","modified_gmt":"2025-09-18T14:49:20","slug":"venom-vulnerability","status":"publish","type":"post","link":"https:\/\/www.siteground.com\/blog\/venom-vulnerability\/","title":{"rendered":"Venom Vulnerability and SiteGround Cloud and VPS Accounts"},"content":{"rendered":"<p><img loading=\"lazy\" decoding=\"async\" class=\"aligncenter size-full wp-image-7718\" src=\"https:\/\/newblog.siteground.com\/en\/wp-content\/uploads\/sites\/2\/2016\/05\/vulnerability-fixed-venom.jpg\" alt=\"vulnerability-fixed-venom\" width=\"660\" height=\"220\"><\/p>\n<p>A serious security issue in one of the world&#8217;s most popular machine emulator and virtualizer QEMU, used by the most popular virtualization systems &#8211; KVM, Xen and others has been discovered. The so-called Venom&nbsp;attack allows an user with root access to his\/her virtual machine to gain root access to the entire host node under special circumstances. An <a href=\"https:\/\/lists.gnu.org\/archive\/html\/qemu-devel\/2015-05\/msg02561.html\" target=\"_blank\" rel=\"noopener noreferrer\">official patch of for qemu-kvm<\/a>&nbsp;has already been released and it fixes the vulnerability.<br>\n<!--more--><\/p>\n<h3>How This Affects SiteGround Customers?<\/h3>\n<p>As we wrote in a blog post in January, we have switched our former VPS service to a <a href=\"https:\/\/newblog.siteground.com\/en\/new-autoscalable-cloud\/\" target=\"_blank\" rel=\"noopener noreferrer\">new cloud hosting platform<\/a>&nbsp;running on Linux containers. This platform does not use KVM or any other virtualization method, as it is based on Linux containers, which means that all SiteGround customers that launched their cloud plan after January&nbsp;21st 2015, are not affected in any way by this vulnerability.<\/p>\n<p>However, our&nbsp;VPS and Cloud accounts ordered before the launch of our new container-based service are still using the KVM-based virtualization. The good news is that in order to gain root access to a VPS node, the attacker needs root access to at least one of the virtual machines on this node. For security reasons that now pay off, we do not provide such access to our VPS and cloud users. This means that even if you are on a SiteGround KVM-based machine, we&#8217;ve still got you covered.<\/p>\n<p>Nevertheless, the vulnerability exists&nbsp;and it has to be patched. This is why our security team have been working around the clock since the exploit has been announced. The official patch has been tested and we&#8217;re currently deploying it on all KVM-based accounts that we have. The patch requires a reboot of the virtual machine in order to be applied, which will result in approximately 2 to 3 minutes downtime per account. If your account is&nbsp;affected by this security reboot, you will be notified in your User Area.<\/p>\n\n<p>[subscribe_cta]<\/p>\n","protected":false},"excerpt":{"rendered":"A serious security issue in one of the world's most popular machine emulator and virtualizer QEMU, used by the most popular virtualization systems - KVM, Xen and others has been discovered. The so-called Venom&nbsp;attack allows an user with root access to his\/her virtual machine to gain root access to the entire host node under special&hellip;","protected":false},"author":3,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[2098,12],"tags":[],"class_list":["post-7713","post","type-post","status-publish","format-standard","hentry","category-hosting-insights","category-security"],"yoast_head":"<!-- This site is optimized with the Yoast SEO Premium plugin v24.2 (Yoast SEO v24.2) - https:\/\/yoast.com\/wordpress\/plugins\/seo\/ -->\n<title>Venom Vulnerability and SiteGround Cloud and VPS Accounts : SiteGround Blog<\/title>\n<meta name=\"description\" content=\"A serious security issue in one of the world&#039;s most popular machine emulator and virtualizer QEMU, used by the most popular virtualization systems - KVM,\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/newblog.siteground.com\/en\/venom-vulnerability\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Venom Vulnerability and SiteGround Cloud and VPS Accounts\" \/>\n<meta property=\"og:description\" content=\"A serious security issue in one of the world&#039;s most popular machine emulator and virtualizer QEMU, used by the most popular virtualization systems - KVM,\" \/>\n<meta property=\"og:url\" content=\"https:\/\/newblog.siteground.com\/en\/venom-vulnerability\/\" \/>\n<meta property=\"og:site_name\" content=\"SiteGround\" \/>\n<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/siteground\" \/>\n<meta property=\"article:published_time\" content=\"2015-05-14T07:10:40+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2025-09-18T14:49:20+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/newblog.siteground.com\/en\/wp-content\/uploads\/sites\/2\/2016\/05\/vulnerability-fixed-venom.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"660\" \/>\n\t<meta property=\"og:image:height\" content=\"220\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"Hristo Pandjarov\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@siteground\" \/>\n<meta name=\"twitter:site\" content=\"@siteground\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Hristo Pandjarov\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"2 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\/\/newblog.siteground.com\/en\/venom-vulnerability\/#article\",\"isPartOf\":{\"@id\":\"https:\/\/newblog.siteground.com\/en\/venom-vulnerability\/\"},\"author\":{\"name\":\"Hristo Pandjarov\",\"@id\":\"https:\/\/newblog.siteground.com\/en\/#\/schema\/person\/ac3e1be52d672a8747613b4fa6808390\"},\"headline\":\"Venom Vulnerability and SiteGround Cloud and VPS Accounts\",\"datePublished\":\"2015-05-14T07:10:40+00:00\",\"dateModified\":\"2025-09-18T14:49:20+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\/\/newblog.siteground.com\/en\/venom-vulnerability\/\"},\"wordCount\":337,\"commentCount\":5,\"publisher\":{\"@id\":\"https:\/\/newblog.siteground.com\/en\/#organization\"},\"image\":{\"@id\":\"https:\/\/newblog.siteground.com\/en\/venom-vulnerability\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/newblog.siteground.com\/en\/wp-content\/uploads\/sites\/2\/2016\/05\/vulnerability-fixed-venom.jpg\",\"articleSection\":[\"Hosting Insights\",\"Security\"],\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\/\/newblog.siteground.com\/en\/venom-vulnerability\/#respond\"]}]},{\"@type\":\"WebPage\",\"@id\":\"https:\/\/newblog.siteground.com\/en\/venom-vulnerability\/\",\"url\":\"https:\/\/newblog.siteground.com\/en\/venom-vulnerability\/\",\"name\":\"Venom Vulnerability and SiteGround Cloud and VPS Accounts : SiteGround Blog\",\"isPartOf\":{\"@id\":\"https:\/\/newblog.siteground.com\/en\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\/\/newblog.siteground.com\/en\/venom-vulnerability\/#primaryimage\"},\"image\":{\"@id\":\"https:\/\/newblog.siteground.com\/en\/venom-vulnerability\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/newblog.siteground.com\/en\/wp-content\/uploads\/sites\/2\/2016\/05\/vulnerability-fixed-venom.jpg\",\"datePublished\":\"2015-05-14T07:10:40+00:00\",\"dateModified\":\"2025-09-18T14:49:20+00:00\",\"description\":\"A serious security issue in one of the world's most popular machine emulator and virtualizer QEMU, used by the most popular virtualization systems - KVM,\",\"breadcrumb\":{\"@id\":\"https:\/\/newblog.siteground.com\/en\/venom-vulnerability\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/newblog.siteground.com\/en\/venom-vulnerability\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/newblog.siteground.com\/en\/venom-vulnerability\/#primaryimage\",\"url\":\"https:\/\/newblog.siteground.com\/en\/wp-content\/uploads\/sites\/2\/2016\/05\/vulnerability-fixed-venom.jpg\",\"contentUrl\":\"https:\/\/newblog.siteground.com\/en\/wp-content\/uploads\/sites\/2\/2016\/05\/vulnerability-fixed-venom.jpg\",\"width\":660,\"height\":220},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/newblog.siteground.com\/en\/venom-vulnerability\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/newblog.siteground.com\/en\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Venom Vulnerability and SiteGround Cloud and VPS Accounts\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/newblog.siteground.com\/en\/#website\",\"url\":\"https:\/\/newblog.siteground.com\/en\/\",\"name\":\"SiteGround Blog\",\"description\":\"\",\"publisher\":{\"@id\":\"https:\/\/newblog.siteground.com\/en\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/newblog.siteground.com\/en\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\/\/newblog.siteground.com\/en\/#organization\",\"name\":\"SiteGround Blog\",\"url\":\"https:\/\/newblog.siteground.com\/en\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/newblog.siteground.com\/en\/#\/schema\/logo\/image\/\",\"url\":\"https:\/\/newblog.siteground.com\/en\/wp-content\/uploads\/sites\/2\/2025\/01\/Siteground-Logo-on-white.jpg\",\"contentUrl\":\"https:\/\/newblog.siteground.com\/en\/wp-content\/uploads\/sites\/2\/2025\/01\/Siteground-Logo-on-white.jpg\",\"width\":1200,\"height\":400,\"caption\":\"SiteGround Blog\"},\"image\":{\"@id\":\"https:\/\/newblog.siteground.com\/en\/#\/schema\/logo\/image\/\"},\"sameAs\":[\"https:\/\/www.facebook.com\/siteground\",\"https:\/\/x.com\/siteground\",\"https:\/\/www.instagram.com\/siteground\/\",\"https:\/\/www.youtube.com\/@siteground\"]},{\"@type\":\"Person\",\"@id\":\"https:\/\/newblog.siteground.com\/en\/#\/schema\/person\/ac3e1be52d672a8747613b4fa6808390\",\"name\":\"Hristo Pandjarov\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/newblog.siteground.com\/en\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/e7d38ccbb1776eaf1c34c8453bdc6de1?s=96&d=mm&r=g\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/e7d38ccbb1776eaf1c34c8453bdc6de1?s=96&d=mm&r=g\",\"caption\":\"Hristo Pandjarov\"},\"sameAs\":[\"https:\/\/www.linkedin.com\/in\/hristo-pandjarov-05194841\/\"],\"url\":\"https:\/\/newblog.siteground.com\/en\/author\/hristo\/\"}]}<\/script>\n<!-- \/ Yoast SEO Premium plugin. -->","yoast_head_json":{"title":"Venom Vulnerability and SiteGround Cloud and VPS Accounts : SiteGround Blog","description":"A serious security issue in one of the world's most popular machine emulator and virtualizer QEMU, used by the most popular virtualization systems - KVM,","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/newblog.siteground.com\/en\/venom-vulnerability\/","og_locale":"en_US","og_type":"article","og_title":"Venom Vulnerability and SiteGround Cloud and VPS Accounts","og_description":"A serious security issue in one of the world's most popular machine emulator and virtualizer QEMU, used by the most popular virtualization systems - KVM,","og_url":"https:\/\/newblog.siteground.com\/en\/venom-vulnerability\/","og_site_name":"SiteGround","article_publisher":"https:\/\/www.facebook.com\/siteground","article_published_time":"2015-05-14T07:10:40+00:00","article_modified_time":"2025-09-18T14:49:20+00:00","og_image":[{"width":660,"height":220,"url":"https:\/\/newblog.siteground.com\/en\/wp-content\/uploads\/sites\/2\/2016\/05\/vulnerability-fixed-venom.jpg","type":"image\/jpeg"}],"author":"Hristo Pandjarov","twitter_card":"summary_large_image","twitter_creator":"@siteground","twitter_site":"@siteground","twitter_misc":{"Written by":"Hristo Pandjarov","Est. reading time":"2 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/newblog.siteground.com\/en\/venom-vulnerability\/#article","isPartOf":{"@id":"https:\/\/newblog.siteground.com\/en\/venom-vulnerability\/"},"author":{"name":"Hristo Pandjarov","@id":"https:\/\/newblog.siteground.com\/en\/#\/schema\/person\/ac3e1be52d672a8747613b4fa6808390"},"headline":"Venom Vulnerability and SiteGround Cloud and VPS Accounts","datePublished":"2015-05-14T07:10:40+00:00","dateModified":"2025-09-18T14:49:20+00:00","mainEntityOfPage":{"@id":"https:\/\/newblog.siteground.com\/en\/venom-vulnerability\/"},"wordCount":337,"commentCount":5,"publisher":{"@id":"https:\/\/newblog.siteground.com\/en\/#organization"},"image":{"@id":"https:\/\/newblog.siteground.com\/en\/venom-vulnerability\/#primaryimage"},"thumbnailUrl":"https:\/\/newblog.siteground.com\/en\/wp-content\/uploads\/sites\/2\/2016\/05\/vulnerability-fixed-venom.jpg","articleSection":["Hosting Insights","Security"],"inLanguage":"en-US","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/newblog.siteground.com\/en\/venom-vulnerability\/#respond"]}]},{"@type":"WebPage","@id":"https:\/\/newblog.siteground.com\/en\/venom-vulnerability\/","url":"https:\/\/newblog.siteground.com\/en\/venom-vulnerability\/","name":"Venom Vulnerability and SiteGround Cloud and VPS Accounts : SiteGround Blog","isPartOf":{"@id":"https:\/\/newblog.siteground.com\/en\/#website"},"primaryImageOfPage":{"@id":"https:\/\/newblog.siteground.com\/en\/venom-vulnerability\/#primaryimage"},"image":{"@id":"https:\/\/newblog.siteground.com\/en\/venom-vulnerability\/#primaryimage"},"thumbnailUrl":"https:\/\/newblog.siteground.com\/en\/wp-content\/uploads\/sites\/2\/2016\/05\/vulnerability-fixed-venom.jpg","datePublished":"2015-05-14T07:10:40+00:00","dateModified":"2025-09-18T14:49:20+00:00","description":"A serious security issue in one of the world's most popular machine emulator and virtualizer QEMU, used by the most popular virtualization systems - KVM,","breadcrumb":{"@id":"https:\/\/newblog.siteground.com\/en\/venom-vulnerability\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/newblog.siteground.com\/en\/venom-vulnerability\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/newblog.siteground.com\/en\/venom-vulnerability\/#primaryimage","url":"https:\/\/newblog.siteground.com\/en\/wp-content\/uploads\/sites\/2\/2016\/05\/vulnerability-fixed-venom.jpg","contentUrl":"https:\/\/newblog.siteground.com\/en\/wp-content\/uploads\/sites\/2\/2016\/05\/vulnerability-fixed-venom.jpg","width":660,"height":220},{"@type":"BreadcrumbList","@id":"https:\/\/newblog.siteground.com\/en\/venom-vulnerability\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/newblog.siteground.com\/en\/"},{"@type":"ListItem","position":2,"name":"Venom Vulnerability and SiteGround Cloud and VPS Accounts"}]},{"@type":"WebSite","@id":"https:\/\/newblog.siteground.com\/en\/#website","url":"https:\/\/newblog.siteground.com\/en\/","name":"SiteGround Blog","description":"","publisher":{"@id":"https:\/\/newblog.siteground.com\/en\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/newblog.siteground.com\/en\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/newblog.siteground.com\/en\/#organization","name":"SiteGround Blog","url":"https:\/\/newblog.siteground.com\/en\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/newblog.siteground.com\/en\/#\/schema\/logo\/image\/","url":"https:\/\/newblog.siteground.com\/en\/wp-content\/uploads\/sites\/2\/2025\/01\/Siteground-Logo-on-white.jpg","contentUrl":"https:\/\/newblog.siteground.com\/en\/wp-content\/uploads\/sites\/2\/2025\/01\/Siteground-Logo-on-white.jpg","width":1200,"height":400,"caption":"SiteGround Blog"},"image":{"@id":"https:\/\/newblog.siteground.com\/en\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/www.facebook.com\/siteground","https:\/\/x.com\/siteground","https:\/\/www.instagram.com\/siteground\/","https:\/\/www.youtube.com\/@siteground"]},{"@type":"Person","@id":"https:\/\/newblog.siteground.com\/en\/#\/schema\/person\/ac3e1be52d672a8747613b4fa6808390","name":"Hristo Pandjarov","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/newblog.siteground.com\/en\/#\/schema\/person\/image\/","url":"https:\/\/secure.gravatar.com\/avatar\/e7d38ccbb1776eaf1c34c8453bdc6de1?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/e7d38ccbb1776eaf1c34c8453bdc6de1?s=96&d=mm&r=g","caption":"Hristo Pandjarov"},"sameAs":["https:\/\/www.linkedin.com\/in\/hristo-pandjarov-05194841\/"],"url":"https:\/\/newblog.siteground.com\/en\/author\/hristo\/"}]}},"_links":{"self":[{"href":"https:\/\/newblog.siteground.com\/en\/wp-json\/wp\/v2\/posts\/7713","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/newblog.siteground.com\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/newblog.siteground.com\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/newblog.siteground.com\/en\/wp-json\/wp\/v2\/users\/3"}],"replies":[{"embeddable":true,"href":"https:\/\/newblog.siteground.com\/en\/wp-json\/wp\/v2\/comments?post=7713"}],"version-history":[{"count":3,"href":"https:\/\/newblog.siteground.com\/en\/wp-json\/wp\/v2\/posts\/7713\/revisions"}],"predecessor-version":[{"id":17918,"href":"https:\/\/newblog.siteground.com\/en\/wp-json\/wp\/v2\/posts\/7713\/revisions\/17918"}],"wp:attachment":[{"href":"https:\/\/newblog.siteground.com\/en\/wp-json\/wp\/v2\/media?parent=7713"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/newblog.siteground.com\/en\/wp-json\/wp\/v2\/categories?post=7713"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/newblog.siteground.com\/en\/wp-json\/wp\/v2\/tags?post=7713"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}