{"id":157454,"date":"2026-02-08T11:12:03","date_gmt":"2026-02-08T09:12:03","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/ai-model-claude-opus-4-6-vyyavila-bolee-500-ranee-neizvestnyh-uyazvimostej"},"modified":"2026-02-08T11:12:03","modified_gmt":"2026-02-08T09:12:03","slug":"ai-model-claude-opus-4-6-vyyavila-bolee-500-ranee-neizvestnyh-uyazvimostej","status":"publish","type":"post","link":"https:\/\/prohoster.info\/et\/blog\/novosti-interneta\/ai-model-claude-opus-4-6-vyyavila-bolee-500-ranee-neizvestnyh-uyazvimostej","title":{"rendered":"AI-mudel Claude Opus 4.6 tuvastas \u00fcle 500 varjatud haavatavuse","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Firma Anthropic teatas, et AI-mudel Claude Opus 4.6 on saanud laiendusi koodi haavatavuste otsimiseks ning jagas katsetulemusi, mille k\u00e4igus leiti \u00fcle 500 enneolematult (0-day) haavatavuse erinevates avatud projektide uusimates versioonides. T\u00f6\u00f6 keskendus m\u00e4luprobleemidest tingitud haavatavuste tuvastamisele, kuna nende olemasolu on lihtsam kontrollida. Iga leitud haavatavusele omistati k\u00f5rge ohutaseme. K\u00f5iki haavatavusi kontrollis k\u00e4sitsi ja kinnitas Anthropic'i t\u00f6\u00f6tajad v\u00f5i kaasatud v\u00e4lisharidusuuringute spetsialistid. <\/p>\n

Haavatavuste anal\u00fc\u00fcsimiseks kaasati populaarsete avatud projektide koodibaasid, mis on juba pikka aega pideva fuzzing-testi teenuse OSS-Fuzz all. Erinevalt fuzzing-testimisest, kus genereeritakse voog erinevaid juhuslikke sisendkompone, p\u00fc\u00fcdis AI-mudel anal\u00fc\u00fcsida koodi, arvestades varasemaid parandusi, et tuvastada sarnaseid lahendamata vigu, tuues esile probleemseid mustreid ja loogiliselt j\u00e4reldades, millised sisendid v\u00f5ivad t\u00e4itmist katkestada. <\/p>\n

Eksperimendi k\u00e4igus tuvastatud haavatavuste teave on juba edastatud kaasnevatele spetsialistidele, kes teevad koost\u00f6\u00f6d paranduste vastuv\u00f5tmiseks. Et aidata kaasnevaid spetsialiste, loodi k\u00e4sitsi teostatud kontrolli k\u00e4igus avastatud probleemide lahendamiseks plaastrid. N\u00e4iteks toome v\u00e4lja kolm haavatavust GhostScriptis, OpenSC-is ja CGIF-is, mis avaldamise hetkel olid kaasnevate spetsialistide poolt k\u00f5rvaldatud. <\/p>\n

Probleemide tuvastamiseks kasutatud konfiguratsioon ei sarnanenud traditsiooniliste automaatsete haavatavuste otsingus\u00fcsteemidega \u2014 mudel Claude Opus 4.6-le anti ligip\u00e4\u00e4s virtuaalmasinas<\/a>, kuhu olid peale uuritava koodi paigaldatud ka standardarendust\u00f6\u00f6riistad (coreutils, Python jne) ja haavatavuste t\u00f5rje- ja anal\u00fc\u00fcsit\u00f6\u00f6riistad (sealhulgas fuzzing-testi t\u00f6\u00f6riistad). Mudelile ei antud selgeid juhiseid nende t\u00f6\u00f6riistade kasutamiseks ega r\u00e4\u00e4gitud erilistest haavatavuste avastamise meetoditest. Mudelile anti vaid \u00fclesanne ja v\u00f5imalus iseseisvalt m\u00f5elda, kuidas optimaalselt olemasolevaid t\u00f6\u00f6riistu kasutada. <\/p>\n

Haavatavuste otsimisel \u00fcritas GhostScript AI mudel alguses teha fuzzing-testimist, kuid kui see ei andnud tulemusi, p\u00f6\u00f6rdus see koodi anal\u00fc\u00fcsi poole. Koodi anal\u00fc\u00fcs ei andnud samuti tulemusi ja seej\u00e4rel hakkas mudel uurima git muudatusajalugu, kus \u00fche commit'i puhul m\u00e4rkas see puhverpiiride kontrollimise mainimist. Komitti anal\u00fc\u00fcsides m\u00e4\u00e4ras mudel, et parandamine lisas puhverpiiride kontrolli, mis oli puudulik fontide t\u00f6\u00f6tlemisel. <\/p>\n

Seej\u00e4rel m\u00e4\u00e4ras mudel koodi, mis oli enne parandamist, ja p\u00fc\u00fcdis leida \u00fclej\u00e4\u00e4nud koodist sarnaseid mudeleid probleemse funktsiooni kasutamisest, mis j\u00e4i parandamata. L\u00f5ppkokkuv\u00f5ttes avastati failis gdevpsfx.c funktsiooni gs_type1_blend kutsumine ilma v\u00e4\u00e4rtuste \u00f5igsuse kontrollimiseta. L\u00f5puks tuvastas mudel faili sisu, mille t\u00f6\u00f6tlemine t\u00f5i kaasa kokkuvarisemise, kuna andmeid kirjutati m\u00e4lupiirkonda, mis oli v\u00e4ljaspool eraldatud puhversuvi. <\/p>\n

CGIF AI mudel l\u00e4htus eeldusest, et GIF-failide lahti pakkimisel pidas raamatukogu silmas, et kokkupakitud andmete maht on alati v\u00e4iksem kui lahti pakitud. Haavatavuse leidmise keskmes oli tingimuste m\u00e4\u00e4ramine, millal LZW algoritmiga kokkupakitud andmed on suuremad lahti pakitud andmetest. Sellised tingimused leiti ning AI mudel suutis moodustada GIT-faili, mille t\u00f6\u00f6tlemine p\u00f5hjustas puhverdus\u00fclevoolu. OpenSC-s tuvastati probleem p\u00e4rast koodi potentsiaalselt ohtlike funktsioonide strrchr ja strcat anal\u00fc\u00fcsimist. <\/p>\n

T\u00e4heldatakse, et keelemudelid on saavutanud taseme, mis v\u00f5imaldab tuvastada varasemaid teadmata haavatavusi ja peagi \u00fcletavad nad turvaeksperte haavatavuste leidmise kiiruselt ja ulatuselt. Eeldatakse, et tuvastatud haavatavuste arvu kasv n\u00f5uab informatsiooni jagamise protsesside reformeerimist, kuna praegu antud 90 p\u00e4eva parandamiseks on ebapiisav.
\n
Allikas: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Anthropic \u043e\u0431\u044a\u044f\u0432\u0438\u043b\u0430 \u043e \u0440\u0430\u0441\u0448\u0438\u0440\u0435\u043d\u0438\u0438 \u0432 AI-\u043c\u043e\u0434\u0435\u043b\u0438 Claude Opus 4.6 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u0435\u0439 \u043f\u043e \u043f\u043e\u0438\u0441\u043a\u0443 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u043a\u043e\u0434\u0435 \u0438 \u043f\u043e\u0434\u0435\u043b\u0438\u043b\u0430\u0441\u044c \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u0430\u043c\u0438 \u044d\u043a\u0441\u043f\u0435\u0440\u0438\u043c\u0435\u043d\u0442\u0430, \u0432 \u0445\u043e\u0434\u0435 \u043a\u043e\u0442\u043e\u0440\u043e\u0433\u043e \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u043e \u0431\u043e\u043b\u0435\u0435 500 \u0440\u0430\u043d\u0435\u0435 \u043d\u0435\u0438\u0437\u0432\u0435\u0441\u0442\u043d\u044b\u0445 (0-day) \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0438\u0445 \u0432\u0435\u0440\u0441\u0438\u044f\u0445 \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u0445 \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u0445 \u043f\u0440\u043e\u0435\u043a\u0442\u043e\u0432. \u0420\u0430\u0431\u043e\u0442\u0430 \u0431\u044b\u043b\u0430 \u0441\u0444\u043e\u043a\u0443\u0441\u0438\u0440\u043e\u0432\u0430\u043d\u0430 \u043d\u0430 \u043f\u043e\u0438\u0441\u043a\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u0432\u044b\u0437\u0432\u0430\u043d\u043d\u044b\u0445 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430\u043c\u0438 \u043f\u0440\u0438 \u0440\u0430\u0431\u043e\u0442\u0435 \u0441 \u043f\u0430\u043c\u044f\u0442\u044c\u044e, \u0442\u0430\u043a \u043a\u0430\u043a \u0438\u0445 \u043d\u0430\u043b\u0438\u0447\u0438\u0435 \u043f\u0440\u043e\u0449\u0435 \u043f\u0440\u043e\u0432\u0435\u0440\u0438\u0442\u044c. \u0412\u0441\u0435\u043c […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":8,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-157454","post","type-post","status-publish","format-standard","hentry","category-novosti-interneta"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47AI mudel Claude Opus 4.6 avastas \u00fcle 500 varem tundmatu haavatavuse | ProHoster","description":"Ettev\u00f5te Anthropic teatas Claude Opus 4.6 tehisintellektimudeli laiendamisest, mis sisaldab koodi haavatavuste leidmise v\u00f5imalusi, ning jagas katse tulemusi, mille k\u00e4igus avastati \u00fcle 500 varem teadmata (0-p\u00e4eva) haavatavuse erinevate avatud projektide viimastes versioonides. T\u00f6\u00f6 keskendus m\u00e4luga seotud probleemide t\u00f5ttu haavatavuste leidmisele, kuna nende olemasolu on kergem tuvastada. K\u00f5igile","canonical_url":"https:\/\/prohoster.info\/et\/blog\/novosti-interneta\/ai-model-claude-opus-4-6-vyyavila-bolee-500-ranee-neizvestnyh-uyazvimostej","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"et_EE","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47AI-\u043c\u043e\u0434\u0435\u043b\u044c Claude Opus 4.6 \u0432\u044b\u044f\u0432\u0438\u043b\u0430 \u0431\u043e\u043b\u0435\u0435 500 \u0440\u0430\u043d\u0435\u0435 \u043d\u0435\u0438\u0437\u0432\u0435\u0441\u0442\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 | ProHoster","og:description":"\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Anthropic \u043e\u0431\u044a\u044f\u0432\u0438\u043b\u0430 \u043e \u0440\u0430\u0441\u0448\u0438\u0440\u0435\u043d\u0438\u0438 \u0432 AI-\u043c\u043e\u0434\u0435\u043b\u0438 Claude Opus 4.6 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u0435\u0439 \u043f\u043e \u043f\u043e\u0438\u0441\u043a\u0443 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u043a\u043e\u0434\u0435 \u0438 \u043f\u043e\u0434\u0435\u043b\u0438\u043b\u0430\u0441\u044c \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u0430\u043c\u0438 \u044d\u043a\u0441\u043f\u0435\u0440\u0438\u043c\u0435\u043d\u0442\u0430, \u0432 \u0445\u043e\u0434\u0435 \u043a\u043e\u0442\u043e\u0440\u043e\u0433\u043e \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u043e \u0431\u043e\u043b\u0435\u0435 500 \u0440\u0430\u043d\u0435\u0435 \u043d\u0435\u0438\u0437\u0432\u0435\u0441\u0442\u043d\u044b\u0445 (0-day) \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0438\u0445 \u0432\u0435\u0440\u0441\u0438\u044f\u0445 \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u0445 \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u0445 \u043f\u0440\u043e\u0435\u043a\u0442\u043e\u0432. \u0420\u0430\u0431\u043e\u0442\u0430 \u0431\u044b\u043b\u0430 \u0441\u0444\u043e\u043a\u0443\u0441\u0438\u0440\u043e\u0432\u0430\u043d\u0430 \u043d\u0430 \u043f\u043e\u0438\u0441\u043a\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u0432\u044b\u0437\u0432\u0430\u043d\u043d\u044b\u0445 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430\u043c\u0438 \u043f\u0440\u0438 \u0440\u0430\u0431\u043e\u0442\u0435 \u0441 \u043f\u0430\u043c\u044f\u0442\u044c\u044e, \u0442\u0430\u043a \u043a\u0430\u043a \u0438\u0445 \u043d\u0430\u043b\u0438\u0447\u0438\u0435 \u043f\u0440\u043e\u0449\u0435 \u043f\u0440\u043e\u0432\u0435\u0440\u0438\u0442\u044c. \u0412\u0441\u0435\u043c","og:url":"https:\/\/prohoster.info\/et\/blog\/novosti-interneta\/ai-model-claude-opus-4-6-vyyavila-bolee-500-ranee-neizvestnyh-uyazvimostej","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2026-02-08T09:12:03+00:00","article:modified_time":"2026-02-08T09:12:03+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"157454","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":"default","schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-02-08 09:12:54","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2026-02-08 09:12:03","updated":"2026-02-08 09:12:54"},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/157454","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/users\/8"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/comments?post=157454"}],"version-history":[{"count":1,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/157454\/revisions"}],"predecessor-version":[{"id":164240,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/157454\/revisions\/164240"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/media?parent=157454"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/categories?post=157454"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/tags?post=157454"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}