{"id":157454,"date":"2026-02-08T11:12:03","date_gmt":"2026-02-08T09:12:03","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/ai-model-claude-opus-4-6-vyyavila-bolee-500-ranee-neizvestnyh-uyazvimostej"},"modified":"2026-02-08T11:12:03","modified_gmt":"2026-02-08T09:12:03","slug":"ai-model-claude-opus-4-6-vyyavila-bolee-500-ranee-neizvestnyh-uyazvimostej","status":"publish","type":"post","link":"https:\/\/prohoster.info\/da\/blog\/news\/ai-model-claude-opus-4-6-vyyavila-bolee-500-ranee-neizvestnyh-uyazvimostej","title":{"rendered":"AI-modellen Claude Opus 4.6 har identificeret over 500 tidligere ukendte s\u00e5rbarheder.","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Virksomheden Anthropic har annonceret, at AI-modellen Claude Opus 4.6 har f\u00e5et udvidede funktioner til at finde s\u00e5rbarheder i kode, og de har delt resultaterne af et eksperiment, hvor mere end 500 tidligere ukendte (0-dages) s\u00e5rbarheder blev identificeret i de nyeste versioner af forskellige open source-projekter. Arbejdet har v\u00e6ret fokuseret p\u00e5 at finde s\u00e5rbarheder for\u00e5rsaget af problemer med hukommelsen, da disse er lettere at verificere. Alle identificerede s\u00e5rbarheder er blevet tildelt en h\u00f8j fareklasse. Hver s\u00e5rbarhed blev manuelt unders\u00f8gt og bekr\u00e6ftet af medarbejdere fra Anthropic eller eksterne sikkerhedsforskere. <\/p>\n

Til analysen af s\u00e5rbarhederne blev kildekoderne fra popul\u00e6re open source-projekter, der i l\u00e6ngere tid har v\u00e6ret under kontinuerlig fuzzing-testning i tjenesten OSS-Fuzz, inddraget. I mods\u00e6tning til fuzzing-testning, hvor der genereres en str\u00f8m af forskellige tilf\u00e6ldige kombinationer af inputdata, fors\u00f8gte AI-modellen at analysere koden under hensyntagen til tidligere rettelser for at identificere lignende uoprettede fejl, fremh\u00e6ve problematiske m\u00f8nstre og logisk udlede, hvilke inputdata der kan forstyrre udf\u00f8relsen. <\/p>\n

Informationen om de s\u00e5rbarheder, der blev identificeret under eksperimentet, er allerede begyndt at blive videregivet til de vedligeholdere, som der arbejdes sammen med for at implementere rettelser. For at hj\u00e6lpe de vedligeholdere, under den gennemf\u00f8rte kontrol, er der manuelt blevet udviklet patches til at rette de identificerede problemer. Som eksempel er tre s\u00e5rbarheder i GhostScript, OpenSC og CGIF n\u00e6vnt, som p\u00e5 tidspunktet for publiceringen er blevet l\u00f8st af vedligeholderne. <\/p>\n

Den anvendte konfiguration til identifikation af problemer lignede ikke traditionelle systemer til automatisk s\u00e5rbarhedss\u00f8gning - modellen Claude Opus 4.6 havde f\u00e5et adgang til virtuelle maskiner<\/a>, hvor der udover den unders\u00f8gte kode var installeret standard udviklingsv\u00e6rkt\u00f8jer (coreutils, Python osv.) og v\u00e6rkt\u00f8jer til fejlfinding og s\u00e5rbarhedsanalyse (herunder v\u00e6rkt\u00f8jer til fuzzing-testning). Modellen fik ikke klare instruktioner til brug af disse v\u00e6rkt\u00f8jer og fik ikke specifik information om metoder til at finde s\u00e5rbarheder. Modellen fik kun en opgave og mulighed for selv at r\u00e6sonnere om den optimale anvendelse af de tilg\u00e6ngelige v\u00e6rkt\u00f8jer. <\/p>\n

I s\u00f8gen efter s\u00e5rbarheder i GhostScript fors\u00f8gte AI-modellen f\u00f8rst at udf\u00f8re fuzzing-test, men da dette ikke gav resultater, skiftede den til kodeanalyse. Kodeanalysen gav heller ikke resultater, og modellen begyndte at studere \u00e6ndringshistorikken i git og opdagede i et af committene en omtale af gr\u00e6nsekontrol. Ved at analysere committen fastslog modellen, at rettelsen tilf\u00f8jede en manglende gr\u00e6nsekontrol ved behandling af skrifttyper. <\/p>\n

Derefter identificerede modellen koden, der var f\u00f8r rettelsen, og fors\u00f8gte at finde lignende brugsm\u00f8nstre af den problematiske funktion i den resterende kode, der forblev uopdagede. Som f\u00f8lge heraf blev der i filen gdevpsfx.c identificeret et kald til funktionen gs_type1_blend uden validering af parametrenes korrekthed. Til sidst udvalgte modellen indholdet af en fil, hvis behandling f\u00f8rte til en nedbrud p\u00e5 grund af skrivning af data uden for den tildelte buffer. <\/p>\n

I CGIF tog AI-modellen udgangspunkt i, at n\u00e5r GIF-filer udpakkes, anses st\u00f8rrelsen af de komprimerede data altid for at v\u00e6re mindre end de udpakkede. S\u00f8gningen efter s\u00e5rbarheden var centreret om at bestemme de betingelser, under hvilke de komprimerede data fra LZW-algoritmen ville blive st\u00f8rre end de udpakkede. S\u00e5danne betingelser blev fundet, og AI-modellen var i stand til at skabe en GIT-fil, hvis behandling f\u00f8rte til buffer-overl\u00f8b. I OpenSC blev problemet afsl\u00f8ret efter analyse af brugen af potentielt farlige funktioner som strrchr og strcat. <\/p>\n

Det bem\u00e6rkes, at sprogmodeller har n\u00e5et et niveau, hvor de kan identificere tidligere ukendte s\u00e5rbarheder, og inden l\u00e6nge vil de overg\u00e5 sikkerhedseksperter i hastighed og omfang af s\u00e5rbarhedss\u00f8gning. Det antages, at stigningen i antallet af identificerede s\u00e5rbarheder vil kr\u00e6ve reformer af de eksisterende processer for offentligg\u00f8relse af oplysninger, da de nuv\u00e6rende 90 dage til reparation ikke vil v\u00e6re tilstr\u00e6kkelige.
\n
Kilde: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Anthropic \u043e\u0431\u044a\u044f\u0432\u0438\u043b\u0430 \u043e \u0440\u0430\u0441\u0448\u0438\u0440\u0435\u043d\u0438\u0438 \u0432 AI-\u043c\u043e\u0434\u0435\u043b\u0438 Claude Opus 4.6 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u0435\u0439 \u043f\u043e \u043f\u043e\u0438\u0441\u043a\u0443 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u043a\u043e\u0434\u0435 \u0438 \u043f\u043e\u0434\u0435\u043b\u0438\u043b\u0430\u0441\u044c \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u0430\u043c\u0438 \u044d\u043a\u0441\u043f\u0435\u0440\u0438\u043c\u0435\u043d\u0442\u0430, \u0432 \u0445\u043e\u0434\u0435 \u043a\u043e\u0442\u043e\u0440\u043e\u0433\u043e \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u043e \u0431\u043e\u043b\u0435\u0435 500 \u0440\u0430\u043d\u0435\u0435 \u043d\u0435\u0438\u0437\u0432\u0435\u0441\u0442\u043d\u044b\u0445 (0-day) \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0438\u0445 \u0432\u0435\u0440\u0441\u0438\u044f\u0445 \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u0445 \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u0445 \u043f\u0440\u043e\u0435\u043a\u0442\u043e\u0432. \u0420\u0430\u0431\u043e\u0442\u0430 \u0431\u044b\u043b\u0430 \u0441\u0444\u043e\u043a\u0443\u0441\u0438\u0440\u043e\u0432\u0430\u043d\u0430 \u043d\u0430 \u043f\u043e\u0438\u0441\u043a\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u0432\u044b\u0437\u0432\u0430\u043d\u043d\u044b\u0445 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430\u043c\u0438 \u043f\u0440\u0438 \u0440\u0430\u0431\u043e\u0442\u0435 \u0441 \u043f\u0430\u043c\u044f\u0442\u044c\u044e, \u0442\u0430\u043a \u043a\u0430\u043a \u0438\u0445 \u043d\u0430\u043b\u0438\u0447\u0438\u0435 \u043f\u0440\u043e\u0449\u0435 \u043f\u0440\u043e\u0432\u0435\u0440\u0438\u0442\u044c. \u0412\u0441\u0435\u043c […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":8,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-157454","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47AI-modellen Claude Opus 4.6 har identificeret over 500 tidligere ukendte s\u00e5rbarheder | ProHoster","description":"Virksomheden Anthropic har annonceret en udvidelse af AI-modellen Claude Opus 4.6's evner til at finde s\u00e5rbarheder i koden og delt resultaterne af et eksperiment, hvorover 500 tidligere ukendte (0-day) s\u00e5rbarheder blev identificeret.","canonical_url":"https:\/\/prohoster.info\/da\/blog\/news\/ai-model-claude-opus-4-6-vyyavila-bolee-500-ranee-neizvestnyh-uyazvimostej","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"da_DK","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47AI-\u043c\u043e\u0434\u0435\u043b\u044c Claude Opus 4.6 \u0432\u044b\u044f\u0432\u0438\u043b\u0430 \u0431\u043e\u043b\u0435\u0435 500 \u0440\u0430\u043d\u0435\u0435 \u043d\u0435\u0438\u0437\u0432\u0435\u0441\u0442\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 | ProHoster","og:description":"\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Anthropic \u043e\u0431\u044a\u044f\u0432\u0438\u043b\u0430 \u043e \u0440\u0430\u0441\u0448\u0438\u0440\u0435\u043d\u0438\u0438 \u0432 AI-\u043c\u043e\u0434\u0435\u043b\u0438 Claude Opus 4.6 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u0435\u0439 \u043f\u043e \u043f\u043e\u0438\u0441\u043a\u0443 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u043a\u043e\u0434\u0435 \u0438 \u043f\u043e\u0434\u0435\u043b\u0438\u043b\u0430\u0441\u044c \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u0430\u043c\u0438 \u044d\u043a\u0441\u043f\u0435\u0440\u0438\u043c\u0435\u043d\u0442\u0430, \u0432 \u0445\u043e\u0434\u0435 \u043a\u043e\u0442\u043e\u0440\u043e\u0433\u043e \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u043e \u0431\u043e\u043b\u0435\u0435 500 \u0440\u0430\u043d\u0435\u0435 \u043d\u0435\u0438\u0437\u0432\u0435\u0441\u0442\u043d\u044b\u0445 (0-day).","og:url":"https:\/\/prohoster.info\/da\/blog\/news\/ai-model-claude-opus-4-6-vyyavila-bolee-500-ranee-neizvestnyh-uyazvimostej","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2026-02-08T09:12:03+00:00","article:modified_time":"2026-02-08T09:12:03+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"157454","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":"default","schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-02-08 09:12:54","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2026-02-08 09:12:03","updated":"2026-02-08 09:12:54","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/posts\/157454","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/users\/8"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/comments?post=157454"}],"version-history":[{"count":1,"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/posts\/157454\/revisions"}],"predecessor-version":[{"id":164240,"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/posts\/157454\/revisions\/164240"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/media?parent=157454"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/categories?post=157454"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/tags?post=157454"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}