{"id":116911,"date":"2024-07-03T18:05:54","date_gmt":"2024-07-03T16:05:54","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/google-nachnyot-vyplachivat-voznagrazhdeniya-za-vyyavlenie-uyazvimostej-v-gipervizore-kvm"},"modified":"2024-07-03T18:05:54","modified_gmt":"2024-07-03T16:05:54","slug":"google-nachnyot-vyplachivat-voznagrazhdeniya-za-vyyavlenie-uyazvimostej-v-gipervizore-kvm","status":"publish","type":"post","link":"https:\/\/prohoster.info\/fr\/blog\/news\/google-nachnyot-vyplachivat-voznagrazhdeniya-za-vyyavlenie-uyazvimostej-v-gipervizore-kvm","title":{"rendered":"Google commencera \u00e0 verser des r\u00e9compenses pour la d\u00e9couverte de vuln\u00e9rabilit\u00e9s dans l'hyperviseur KVM","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Google a lanc\u00e9 l'initiative kvmCTF, permettant aux chercheurs en s\u00e9curit\u00e9 d'obtenir une r\u00e9compense financi\u00e8re pour la d\u00e9couverte de vuln\u00e9rabilit\u00e9s dans l'hyperviseur KVM (Kernel-based Virtual Machine). L'int\u00e9r\u00eat de Google pour KVM d\u00e9coule de son utilisation dans le service Google Cloud, ainsi que dans les plateformes Android et ChromeOS (CrosVM est bas\u00e9 sur KVM). Pour recevoir une r\u00e9compense, il doit \u00eatre d\u00e9montr\u00e9 qu'un piratage a eu lieu dans un environnement CTF (Capture the Flag) sp\u00e9cialement pr\u00e9par\u00e9 bas\u00e9 sur un noyau Linux r\u00e9cent, ex\u00e9cutant une machine virtuelle, accessible sur demande. L'attaquant doit exploiter une vuln\u00e9rabilit\u00e9 dans le sous-syst\u00e8me KVM<\/a> du noyau Linux, qui prend en charge le syst\u00e8me h\u00f4te dans cet environnement.<\/p>\n

Pour la d\u00e9couverte d'une vuln\u00e9rabilit\u00e9 inconnue qui permet de sortir d'une machine virtuelle, une r\u00e9compense de 250 000 dollars est pr\u00e9vue, tandis que pour les vuln\u00e9rabilit\u00e9s permettant d'\u00e9crire dans une zone m\u00e9moire arbitraire, la r\u00e9compense est de 100 000 dollars. Pour les vuln\u00e9rabilit\u00e9s conduisant \u00e0 la lecture \u00e0 partir d'une zone m\u00e9moire arbitraire ou \u00e0 l'\u00e9criture dans des zones m\u00e9moire adjacentes, une r\u00e9compense de 50 000 dollars est offerte, pour une vuln\u00e9rabilit\u00e9 DoS \u2014 20 000 dollars, et pour la lecture \u00e0 partir d'une zone m\u00e9moire adjacente \u2014 10 000 dollars. La r\u00e9compense pour l'\u00e9criture ou la lecture d'une zone m\u00e9moire arbitraire peut \u00eatre obtenue en modifiant ou en r\u00e9cup\u00e9rant la valeur d'une adresse sp\u00e9cifique en m\u00e9moire, et dans le cas d'une zone adjacente \u2014 pour des erreurs identifi\u00e9es par l'outil de d\u00e9bogage KASAN (Kernel Address Sanitizer), telles que le d\u00e9passement de tampon ou l'acc\u00e8s \u00e0 une zone m\u00e9moire d\u00e9j\u00e0 lib\u00e9r\u00e9e. La r\u00e9compense pour une vuln\u00e9rabilit\u00e9 DoS est vers\u00e9e lors de la d\u00e9tection d'une d\u00e9r\u00e9f\u00e9renciation de pointeur nul (null-ptr-deref dans KASAN).
\n
Source : opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Google \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u043b\u0430 \u0438\u043d\u0438\u0446\u0438\u0430\u0442\u0438\u0432\u0443 kvmCTF, \u0432 \u0440\u0430\u043c\u043a\u0430\u0445 \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u043c\u043e\u0433\u0443\u0442 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u0435\u043d\u0435\u0436\u043d\u043e\u0435 \u0432\u043e\u0437\u043d\u0430\u0433\u0440\u0430\u0436\u0434\u0435\u043d\u0438\u0435 \u0437\u0430 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u0433\u0438\u043f\u0435\u0440\u0432\u0438\u0437\u043e\u0440\u0435 KVM (Kernel-based Virtual Machine). \u0418\u043d\u0442\u0435\u0440\u0435\u0441 Google \u043a KVM \u043e\u0431\u0443\u0441\u043b\u043e\u0432\u043b\u0435\u043d \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u0434\u0430\u043d\u043d\u043e\u0433\u043e \u0433\u0438\u043f\u0435\u0440\u0432\u0438\u0437\u043e\u0440\u0430 \u0432 \u0441\u0435\u0440\u0432\u0438\u0441\u0435 Google Cloud, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0432 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u0430\u0445 Android \u0438 ChromeOS (CrosVM \u043e\u0441\u043d\u043e\u0432\u0430\u043d \u043d\u0430 KVM). \u0414\u043b\u044f \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u044f \u0432\u043e\u0437\u043d\u0430\u0433\u0440\u0430\u0436\u0434\u0435\u043d\u0438\u044f \u0434\u043e\u043b\u0436\u0435\u043d \u0431\u044b\u0442\u044c \u043f\u0440\u043e\u0434\u0435\u043c\u043e\u043d\u0441\u0442\u0440\u0438\u0440\u043e\u0432\u0430\u043d \u0432\u0437\u043b\u043e\u043c \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u043f\u043e\u0434\u0433\u043e\u0442\u043e\u0432\u043b\u0435\u043d\u043d\u043e\u0433\u043e […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-116911","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Google commencera \u00e0 verser des r\u00e9compenses pour la d\u00e9couverte de vuln\u00e9rabilit\u00e9s dans l'hyperviseur KVM | ProHoster","description":"Google a lanc\u00e9 l'initiative kvmCTF, permettant aux chercheurs en s\u00e9curit\u00e9 d'obtenir une r\u00e9compense financi\u00e8re pour la d\u00e9couverte de vuln\u00e9rabilit\u00e9s dans l'hyperviseur KVM (Kernel-based Virtual Machine).","canonical_url":"https:\/\/prohoster.info\/fr\/blog\/news\/google-nachnyot-vyplachivat-voznagrazhdeniya-za-vyyavlenie-uyazvimostej-v-gipervizore-kvm","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"fr_FR","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47Google \u043d\u0430\u0447\u043d\u0451\u0442 \u0432\u044b\u043f\u043b\u0430\u0447\u0438\u0432\u0430\u0442\u044c \u0432\u043e\u0437\u043d\u0430\u0433\u0440\u0430\u0436\u0434\u0435\u043d\u0438\u044f \u0437\u0430 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u0433\u0438\u043f\u0435\u0440\u0432\u0438\u0437\u043e\u0440\u0435 KVM | ProHoster","og:description":"\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Google \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u043b\u0430 \u0438\u043d\u0438\u0446\u0438\u0430\u0442\u0438\u0432\u0443 kvmCTF, \u0432 \u0440\u0430\u043c\u043a\u0430\u0445 \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u043c\u043e\u0433\u0443\u0442 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u0435\u043d\u0435\u0436\u043d\u043e\u0435 \u0432\u043e\u0437\u043d\u0430\u0433\u0440\u0430\u0436\u0434\u0435\u043d\u0438\u0435 \u0437\u0430 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u0433\u0438\u043f\u0435\u0440\u0432\u0438\u0437\u043e\u0440\u0435 KVM (Kernel-based Virtual Machine).","og:url":"https:\/\/prohoster.info\/fr\/blog\/news\/google-nachnyot-vyplachivat-voznagrazhdeniya-za-vyyavlenie-uyazvimostej-v-gipervizore-kvm","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2024-07-03T16:05:54+00:00","article:modified_time":"2024-07-03T16:05:54+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"116911","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":"default","schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-01-23 03:22:19","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2026-01-23 03:22:19","updated":"2026-01-23 03:22:19","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/posts\/116911","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/comments?post=116911"}],"version-history":[{"count":1,"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/posts\/116911\/revisions"}],"predecessor-version":[{"id":164301,"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/posts\/116911\/revisions\/164301"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/media?parent=116911"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/categories?post=116911"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/tags?post=116911"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}