{"id":116911,"date":"2024-07-03T18:05:54","date_gmt":"2024-07-03T16:05:54","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/google-nachnyot-vyplachivat-voznagrazhdeniya-za-vyyavlenie-uyazvimostej-v-gipervizore-kvm"},"modified":"2024-07-03T18:05:54","modified_gmt":"2024-07-03T16:05:54","slug":"google-nachnyot-vyplachivat-voznagrazhdeniya-za-vyyavlenie-uyazvimostej-v-gipervizore-kvm","status":"publish","type":"post","link":"https:\/\/prohoster.info\/it\/blog\/novosti-interneta\/google-nachnyot-vyplachivat-voznagrazhdeniya-za-vyyavlenie-uyazvimostej-v-gipervizore-kvm","title":{"rendered":"Google inizier\u00e0 a offrire ricompense per la segnalazione di vulnerabilit\u00e0 nel hypervisor KVM","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Google ha presentato l'iniziativa kvmCTF, dove i ricercatori della sicurezza possono ricevere un premio in denaro per la scoperta di vulnerabilit\u00e0 nel hypervisor KVM (Kernel-based Virtual Machine). L'interesse di Google per KVM \u00e8 dovuto al suo utilizzo nel servizio Google Cloud, nonch\u00e9 nelle piattaforme Android e ChromeOS (CrosVM si basa su KVM). Per ricevere il premio, \u00e8 necessario dimostrare un attacco in un ambiente CTF (Capture the Flag) appositamente preparato basato su un recente kernel Linux che esegue una macchina virtuale, a cui si accede su richiesta. L'attaccante \u00e8 invitato a sfruttare una vulnerabilit\u00e0 nel sottosistema KVM<\/a> nel kernel Linux che gestisce il sistema host in questo ambiente.<\/p>\n

Per la scoperta di una vulnerabilit\u00e0 precedentemente sconosciuta che consente di uscire dalla macchina virtuale, \u00e8 prevista un'indennit\u00e0 di 250.000 dollari, mentre per le vulnerabilit\u00e0 che consentono di scrivere in aree di memoria arbitraria, si prevede un pagamento di 100.000 dollari. Per le vulnerabilit\u00e0 che portano alla lettura da aree di memoria arbitraria o alla scrittura in aree di memoria adiacenti, \u00e8 previsto un pagamento di 50.000 dollari, per una vulnerabilit\u00e0 DoS \u00e8 previsto un pagamento di 20.000 dollari, e per la lettura da un'area di memoria adiacente, di 10.000 dollari. La ricompensa per la scrittura o la lettura di aree di memoria arbitraria pu\u00f2 essere ottenuta modificando o ottenendo il valore di un indirizzo specifico in memoria, e nel caso dell'area adiacente, riguarda errori riconosciuti dallo strumento di debug KASAN (Kernel Address Sanitizer), come il buffer overflow o l'accesso a un'area di memoria gi\u00e0 liberata. La ricompensa per la vulnerabilit\u00e0 DoS viene pagata all'individuazione della dereferenziazione di un puntatore nullo (null-ptr-deref in KASAN).
\n
Fonte: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Google \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u043b\u0430 \u0438\u043d\u0438\u0446\u0438\u0430\u0442\u0438\u0432\u0443 kvmCTF, \u0432 \u0440\u0430\u043c\u043a\u0430\u0445 \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u043c\u043e\u0433\u0443\u0442 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u0435\u043d\u0435\u0436\u043d\u043e\u0435 \u0432\u043e\u0437\u043d\u0430\u0433\u0440\u0430\u0436\u0434\u0435\u043d\u0438\u0435 \u0437\u0430 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u0433\u0438\u043f\u0435\u0440\u0432\u0438\u0437\u043e\u0440\u0435 KVM (Kernel-based Virtual Machine). \u0418\u043d\u0442\u0435\u0440\u0435\u0441 Google \u043a KVM \u043e\u0431\u0443\u0441\u043b\u043e\u0432\u043b\u0435\u043d \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u0434\u0430\u043d\u043d\u043e\u0433\u043e \u0433\u0438\u043f\u0435\u0440\u0432\u0438\u0437\u043e\u0440\u0430 \u0432 \u0441\u0435\u0440\u0432\u0438\u0441\u0435 Google Cloud, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0432 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u0430\u0445 Android \u0438 ChromeOS (CrosVM \u043e\u0441\u043d\u043e\u0432\u0430\u043d \u043d\u0430 KVM). \u0414\u043b\u044f \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u044f \u0432\u043e\u0437\u043d\u0430\u0433\u0440\u0430\u0436\u0434\u0435\u043d\u0438\u044f \u0434\u043e\u043b\u0436\u0435\u043d \u0431\u044b\u0442\u044c \u043f\u0440\u043e\u0434\u0435\u043c\u043e\u043d\u0441\u0442\u0440\u0438\u0440\u043e\u0432\u0430\u043d \u0432\u0437\u043b\u043e\u043c \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u043f\u043e\u0434\u0433\u043e\u0442\u043e\u0432\u043b\u0435\u043d\u043d\u043e\u0433\u043e […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-116911","post","type-post","status-publish","format-standard","hentry","category-novosti-interneta"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Google inizier\u00e0 a erogare premi per la scoperta di vulnerabilit\u00e0 nell'hypervisor KVM | ProHoster","description":"Google ha lanciato l'iniziativa kvmCTF, che consente ai ricercatori di sicurezza di ricevere un premio monetario per la scoperta di vulnerabilit\u00e0 nel hypervisor KVM (Kernel-based Virtual Machine). L'interesse di Google per KVM deriva dall'utilizzo di questo hypervisor nel servizio Google Cloud, cos\u00ec come nelle piattaforme Android e ChromeOS (CrosVM si basa su KVM). Per ricevere il premio, deve essere dimostrato il takeover di un ambiente appositamente preparato.","canonical_url":"https:\/\/prohoster.info\/it\/blog\/novosti-interneta\/google-nachnyot-vyplachivat-voznagrazhdeniya-za-vyyavlenie-uyazvimostej-v-gipervizore-kvm","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"it_IT","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47Google \u043d\u0430\u0447\u043d\u0451\u0442 \u0432\u044b\u043f\u043b\u0430\u0447\u0438\u0432\u0430\u0442\u044c \u0432\u043e\u0437\u043d\u0430\u0433\u0440\u0430\u0436\u0434\u0435\u043d\u0438\u044f \u0437\u0430 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u0433\u0438\u043f\u0435\u0440\u0432\u0438\u0437\u043e\u0440\u0435 KVM | ProHoster","og:description":"\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Google \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u043b\u0430 \u0438\u043d\u0438\u0446\u0438\u0430\u0442\u0438\u0432\u0443 kvmCTF, \u0432 \u0440\u0430\u043c\u043a\u0430\u0445 \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u043c\u043e\u0433\u0443\u0442 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u0435\u043d\u0435\u0436\u043d\u043e\u0435 \u0432\u043e\u0437\u043d\u0430\u0433\u0440\u0430\u0436\u0434\u0435\u043d\u0438\u0435 \u0437\u0430 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u0433\u0438\u043f\u0435\u0440\u0432\u0438\u0437\u043e\u0440\u0435 KVM (Kernel-based Virtual Machine). \u0418\u043d\u0442\u0435\u0440\u0435\u0441 Google \u043a KVM \u043e\u0431\u0443\u0441\u043b\u043e\u0432\u043b\u0435\u043d \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u0434\u0430\u043d\u043d\u043e\u0433\u043e \u0433\u0438\u043f\u0435\u0440\u0432\u0438\u0437\u043e\u0440\u0430 \u0432 \u0441\u0435\u0440\u0432\u0438\u0441\u0435 Google Cloud, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0432 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u0430\u0445 Android \u0438 ChromeOS (CrosVM \u043e\u0441\u043d\u043e\u0432\u0430\u043d \u043d\u0430 KVM). \u0414\u043b\u044f \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u044f \u0432\u043e\u0437\u043d\u0430\u0433\u0440\u0430\u0436\u0434\u0435\u043d\u0438\u044f \u0434\u043e\u043b\u0436\u0435\u043d \u0431\u044b\u0442\u044c \u043f\u0440\u043e\u0434\u0435\u043c\u043e\u043d\u0441\u0442\u0440\u0438\u0440\u043e\u0432\u0430\u043d \u0432\u0437\u043b\u043e\u043c \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u043f\u043e\u0434\u0433\u043e\u0442\u043e\u0432\u043b\u0435\u043d\u043d\u043e\u0433\u043e","og:url":"https:\/\/prohoster.info\/it\/blog\/novosti-interneta\/google-nachnyot-vyplachivat-voznagrazhdeniya-za-vyyavlenie-uyazvimostej-v-gipervizore-kvm","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2024-07-03T16:05:54+00:00","article:modified_time":"2024-07-03T16:05:54+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"116911","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":"default","schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-01-23 03:22:19","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2026-01-23 03:22:19","updated":"2026-01-23 03:22:19","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/posts\/116911","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/comments?post=116911"}],"version-history":[{"count":1,"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/posts\/116911\/revisions"}],"predecessor-version":[{"id":164301,"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/posts\/116911\/revisions\/164301"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/media?parent=116911"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/categories?post=116911"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/tags?post=116911"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}