{"id":157454,"date":"2026-02-08T11:12:03","date_gmt":"2026-02-08T09:12:03","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/ai-model-claude-opus-4-6-vyyavila-bolee-500-ranee-neizvestnyh-uyazvimostej"},"modified":"2026-02-08T11:12:03","modified_gmt":"2026-02-08T09:12:03","slug":"ai-model-claude-opus-4-6-vyyavila-bolee-500-ranee-neizvestnyh-uyazvimostej","status":"publish","type":"post","link":"https:\/\/prohoster.info\/et\/blog\/news\/ai-model-claude-opus-4-6-vyyavila-bolee-500-ranee-neizvestnyh-uyazvimostej","title":{"rendered":"AI mudel Claude Opus 4.6 tuvastas \u00fcle 500 varasema tundmatu haavatavuse","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Anthropic teatas, et AI-mudeli Claude Opus 4.6 t\u00e4iustused koodi haavatavuste otsimisel, samuti jagas tulemusi eksperimendist, mille k\u00e4igus avastati \u00fcle 500 varem tundmatu (0-day) haavatavuse erinevates avatud projektide uusimates versioonides. T\u00f6\u00f6 keskendus m\u00e4luhaldusega seotud haavatavuste tuvastamisele, kuna nende olemasolu on lihtsam kontrollida. K\u00f5ik tuvastatud haavatavused said k\u00f5rge ohuastme. Iga haavatavus kontrolliti k\u00e4sitsi ja kinnitasid Anthropic'i t\u00f6\u00f6tajad v\u00f5i kaasatud v\u00e4listurvalisuse uurijad. <\/p>\n

Haavatavuste anal\u00fc\u00fcsimiseks kaasati populaarsete avatud projektide koodibaasid, mis on juba pikka aega l\u00e4binud pidevat fuzzing-testimist OSS-Fuzzi teenuses. Erinevalt fuzzing-testimisest, kus genereeritakse k\u00f5ikv\u00f5imalikke juhuslike sisendi kombinatsioone, p\u00fc\u00fcdis AI-mudel anal\u00fc\u00fcsida koodi, arvestades varasemaid parandusi sarnaste lahendamata vigade tuvastamiseks, tuues esile probleemseid mustreid ja loogiliselt v\u00e4lja m\u00f5eldes, millised sisendid v\u00f5ivad teostuse kulgu h\u00e4irida. <\/p>\n

Eksperimendi k\u00e4igus tuvastatud haavatavuste kohta teave on juba edastatud hooldajatele, kellega tehakse koost\u00f6\u00f6d paranduste vastuv\u00f5tmisel. Hooldajate abistamiseks koostatakse k\u00e4ideldud kontrolli k\u00e4igus k\u00e4sitsi tuvastatud probleemide parandamiseks pat\u0161id. N\u00e4itena tuuakse v\u00e4lja kolm haavatavust GhostScriptis, OpenSCs ja CGIF-is, mis olid avaldamise hetkel hooldajate poolt k\u00f5rvaldatud. <\/p>\n

Konfiguratsioon, mida kasutati probleemide tuvastamiseks, ei olnud sarnane traditsioonilistele automaatsete haavatavuste otsimise s\u00fcsteemidele \u2014 mudel Claude Opus 4.6 v\u00f5imaldas ligip\u00e4\u00e4su virtuaalses masinas<\/a>, kus koos uuritava koodiga olid paigaldatud t\u00fc\u00fcpilised arendust\u00f6\u00f6riistad (coreutils, Python jne) ja haavatavuste vigade leidmise ja anal\u00fc\u00fcsi utiliidid (sealhulgas fuzzing-testimise utiliidid). Mudelile ei antud selget juhist nende t\u00f6\u00f6riistade kasutamiseks ning ei edastatud erilisi teadlikkusi haavatavuste otsimise meetoditest. Mudelil oli lihtsalt seadus \u00fclesanne ja anti v\u00f5imalus m\u00f5elda v\u00e4lja optimaalne viis olemasolevate t\u00f6\u00f6riistade kasutamiseks. <\/p>\n

Haavatavuste otsimisel on GhostScript AI mudel esmalt proovinud fuzzing-testi teha, kuid kui see ei andnud tulemusi, vahetas see koodi anal\u00fc\u00fcsi vastu. Koodi anal\u00fc\u00fcs ei toonud samuti tulemusi ja siis hakkas mudel uurima git-i muudatusajalugu ning \u00fches commit'is m\u00e4rkas see puutumatuse kontrolli mainimist. Commit'i anal\u00fc\u00fcsides m\u00e4\u00e4ras mudel, et parandamine lisas puutumatuse kontrolli, mis puudus fontide t\u00f6\u00f6tlemisel. <\/p>\n

Seej\u00e4rel m\u00e4\u00e4ras mudel koodi, mis oli enne parandamist, ja proovinud leida \u00fclej\u00e4\u00e4nud koodist sarnaseid probleemi funktsioonide kasutamise mustreid, mis j\u00e4\u00e4vad parandamata. L\u00f5puks tuvastati failis gdevpsfx.c funktsiooni gs_type1_blend v\u00e4ljakutse ilma v\u00e4\u00e4rtuste \u00f5iguse kontrollimata. L\u00f5pptulemusena valis mudel faili sisu, mille t\u00f6\u00f6tlemine viis avariini, kuna andmed kirjutati m\u00e4lu alale v\u00e4ljaspool eraldatud puhvrit. <\/p>\n

CGIF-is tugines AI mudel sellele, et GIF-faile dekompresseerides arvestas raamatukogu, et suletud andmete suurus on alati v\u00e4iksem kui dekompresseeritud. Haavatavuse otsimine keskenduti tingimuste m\u00e4\u00e4ramisele, mille korral LZW algoritmiga suletud andmed oleksid suuremad kui dekompresseeritud. Sellised tingimused leiti ja AI mudel suutis luua GIT-faili, mille t\u00f6\u00f6tlemine viis puhvri \u00fclevooluni. OpenSC-is tuvastati probleem potentsiaalselt ohtlike funktsioonide strrchr ja strcat kasutamise anal\u00fc\u00fcsimisel. <\/p>\n

T\u00e4htis on m\u00e4rkida, et keelemudelid on saavutanud taseme, mis v\u00f5imaldab tuvastada varem tundmatud haavatavused, ja peagi \u00fcletavad nad turbeeksperdid kiiruselt ja haavatavuste leidmise ulatuselt. Eeldatakse, et tuvastatud haavatavuste arvu kasv n\u00f5uab avalikustamisprotsesside reformeerimist, kuna praegu eraldatud 90-p\u00e4eva on ebapiisav.
\n
Allikas: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Anthropic \u043e\u0431\u044a\u044f\u0432\u0438\u043b\u0430 \u043e \u0440\u0430\u0441\u0448\u0438\u0440\u0435\u043d\u0438\u0438 \u0432 AI-\u043c\u043e\u0434\u0435\u043b\u0438 Claude Opus 4.6 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u0435\u0439 \u043f\u043e \u043f\u043e\u0438\u0441\u043a\u0443 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u043a\u043e\u0434\u0435 \u0438 \u043f\u043e\u0434\u0435\u043b\u0438\u043b\u0430\u0441\u044c \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u0430\u043c\u0438 \u044d\u043a\u0441\u043f\u0435\u0440\u0438\u043c\u0435\u043d\u0442\u0430, \u0432 \u0445\u043e\u0434\u0435 \u043a\u043e\u0442\u043e\u0440\u043e\u0433\u043e \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u043e \u0431\u043e\u043b\u0435\u0435 500 \u0440\u0430\u043d\u0435\u0435 \u043d\u0435\u0438\u0437\u0432\u0435\u0441\u0442\u043d\u044b\u0445 (0-day) \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0438\u0445 \u0432\u0435\u0440\u0441\u0438\u044f\u0445 \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u0445 \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u0445 \u043f\u0440\u043e\u0435\u043a\u0442\u043e\u0432. \u0420\u0430\u0431\u043e\u0442\u0430 \u0431\u044b\u043b\u0430 \u0441\u0444\u043e\u043a\u0443\u0441\u0438\u0440\u043e\u0432\u0430\u043d\u0430 \u043d\u0430 \u043f\u043e\u0438\u0441\u043a\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u0432\u044b\u0437\u0432\u0430\u043d\u043d\u044b\u0445 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430\u043c\u0438 \u043f\u0440\u0438 \u0440\u0430\u0431\u043e\u0442\u0435 \u0441 \u043f\u0430\u043c\u044f\u0442\u044c\u044e, \u0442\u0430\u043a \u043a\u0430\u043a \u0438\u0445 \u043d\u0430\u043b\u0438\u0447\u0438\u0435 \u043f\u0440\u043e\u0449\u0435 \u043f\u0440\u043e\u0432\u0435\u0440\u0438\u0442\u044c. \u0412\u0441\u0435\u043c […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":8,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-157454","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47AI mudel Claude Opus 4.6 tuvastas \u00fcle 500 varem tundmatu haavatavuse | ProHoster","description":"Ettev\u00f5te Anthropic teatas AI mudeli Claude Opus 4.6 laiendatud v\u00f5imalustest koodi haavatavuste otsimisel ja jagas katse tulemusi, mille k\u00e4igus tuvastati \u00fcle 500 varem tundmatu (0-day).","canonical_url":"https:\/\/prohoster.info\/et\/blog\/news\/ai-model-claude-opus-4-6-vyyavila-bolee-500-ranee-neizvestnyh-uyazvimostej","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"et_EE","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47AI-\u043c\u043e\u0434\u0435\u043b\u044c Claude Opus 4.6 \u0432\u044b\u044f\u0432\u0438\u043b\u0430 \u0431\u043e\u043b\u0435\u0435 500 \u0440\u0430\u043d\u0435\u0435 \u043d\u0435\u0438\u0437\u0432\u0435\u0441\u0442\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 | ProHoster","og:description":"\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Anthropic \u043e\u0431\u044a\u044f\u0432\u0438\u043b\u0430 \u043e \u0440\u0430\u0441\u0448\u0438\u0440\u0435\u043d\u0438\u0438 \u0432 AI-\u043c\u043e\u0434\u0435\u043b\u0438 Claude Opus 4.6 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u0435\u0439 \u043f\u043e \u043f\u043e\u0438\u0441\u043a\u0443 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u043a\u043e\u0434\u0435 \u0438 \u043f\u043e\u0434\u0435\u043b\u0438\u043b\u0430\u0441\u044c \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u0430\u043c\u0438 \u044d\u043a\u0441\u043f\u0435\u0440\u0438\u043c\u0435\u043d\u0442\u0430, \u0432 \u0445\u043e\u0434\u0435 \u043a\u043e\u0442\u043e\u0440\u043e\u0433\u043e \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u043e \u0431\u043e\u043b\u0435\u0435 500 \u0440\u0430\u043d\u0435\u0435 \u043d\u0435\u0438\u0437\u0432\u0435\u0441\u0442\u043d\u044b\u0445 (0-day).","og:url":"https:\/\/prohoster.info\/et\/blog\/news\/ai-model-claude-opus-4-6-vyyavila-bolee-500-ranee-neizvestnyh-uyazvimostej","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2026-02-08T09:12:03+00:00","article:modified_time":"2026-02-08T09:12:03+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"157454","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":"default","schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-02-08 09:12:54","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2026-02-08 09:12:03","updated":"2026-02-08 09:12:54","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/157454","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/users\/8"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/comments?post=157454"}],"version-history":[{"count":1,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/157454\/revisions"}],"predecessor-version":[{"id":164240,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/157454\/revisions\/164240"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/media?parent=157454"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/categories?post=157454"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/tags?post=157454"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}