{"id":116911,"date":"2024-07-03T18:05:54","date_gmt":"2024-07-03T16:05:54","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/google-nachnyot-vyplachivat-voznagrazhdeniya-za-vyyavlenie-uyazvimostej-v-gipervizore-kvm"},"modified":"2024-07-03T18:05:54","modified_gmt":"2024-07-03T16:05:54","slug":"google-nachnyot-vyplachivat-voznagrazhdeniya-za-vyyavlenie-uyazvimostej-v-gipervizore-kvm","status":"publish","type":"post","link":"https:\/\/prohoster.info\/nl\/blog\/news\/google-nachnyot-vyplachivat-voznagrazhdeniya-za-vyyavlenie-uyazvimostej-v-gipervizore-kvm","title":{"rendered":"Google begint met het uitbetalen van beloningen voor het ontdekken van kwetsbaarheden in de KVM-hypervisor","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Google heeft het kvmCTF-initiatief ge\u00efntroduceerd, waarbij beveiligingsonderzoekers een financi\u00eble beloning kunnen krijgen voor het ontdekken van kwetsbaarheden in de KVM-hypervisor (Kernel-based Virtual Machine). De interesse van Google in KVM is te verklaren door het gebruik van deze hypervisor in Google Cloud, evenals in de platforms Android en ChromeOS (CrosVM is gebaseerd op KVM). Om in aanmerking te komen voor de beloning, moet een hack worden gedemonstreerd in een speciaal voorbereide CTF-omgeving (Capture the Flag) op basis van een recent Linux-kernel die een virtuele machine draait, waarvan de toegang op aanvraag wordt verstrekt. Aanvallers wordt gevraagd een kwetsbaarheid in de subsystemen te exploiteren KVM<\/a> in de Linux-kernel die de werking van de host-systeem in deze omgeving mogelijk maakt.<\/p>\n

Voor het ontdekken van een eerder onbekende kwetsbaarheid die het mogelijk maakt om uit de virtuele machine te ontsnappen, is een beloning van 250.000 dollar beschikbaar. Voor kwetsbaarheden die het mogelijk maken om naar een willekeurige geheugenlocatie te schrijven, is de beloning 100.000 dollar. Voor kwetsbaarheden die leiden tot het lezen van een willekeurige geheugenlocatie of het schrijven naar aangrenzende geheugenlocaties, is een beloning van 50.000 dollar aangekondigd; voor een DoS-kwetsbaarheid is dat 20.000 dollar, en voor het lezen uit aangrenzende geheugenlocaties 10.000 dollar. De beloning voor het schrijven of lezen naar willekeurige geheugenlocaties kan verkregen worden door de waarde van een specifiek geheugenadres te wijzigen of op te vragen, en in het geval van aangrenzende geheugenlocaties kan dit worden toegekend voor fouten die door de debugger KASAN (Kernel Address Sanitizer) worden herkend, zoals bufferoverloop of toegang tot al vrijgegeven geheugen. De beloning voor een DoS-kwetsbaarheid wordt uitgekeerd bij het ontdekken van een null-pointer dereference (null-ptr-deref in KASAN).
\n
Bron: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Google \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u043b\u0430 \u0438\u043d\u0438\u0446\u0438\u0430\u0442\u0438\u0432\u0443 kvmCTF, \u0432 \u0440\u0430\u043c\u043a\u0430\u0445 \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u043c\u043e\u0433\u0443\u0442 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u0435\u043d\u0435\u0436\u043d\u043e\u0435 \u0432\u043e\u0437\u043d\u0430\u0433\u0440\u0430\u0436\u0434\u0435\u043d\u0438\u0435 \u0437\u0430 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u0433\u0438\u043f\u0435\u0440\u0432\u0438\u0437\u043e\u0440\u0435 KVM (Kernel-based Virtual Machine). \u0418\u043d\u0442\u0435\u0440\u0435\u0441 Google \u043a KVM \u043e\u0431\u0443\u0441\u043b\u043e\u0432\u043b\u0435\u043d \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u0434\u0430\u043d\u043d\u043e\u0433\u043e \u0433\u0438\u043f\u0435\u0440\u0432\u0438\u0437\u043e\u0440\u0430 \u0432 \u0441\u0435\u0440\u0432\u0438\u0441\u0435 Google Cloud, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0432 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u0430\u0445 Android \u0438 ChromeOS (CrosVM \u043e\u0441\u043d\u043e\u0432\u0430\u043d \u043d\u0430 KVM). \u0414\u043b\u044f \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u044f \u0432\u043e\u0437\u043d\u0430\u0433\u0440\u0430\u0436\u0434\u0435\u043d\u0438\u044f \u0434\u043e\u043b\u0436\u0435\u043d \u0431\u044b\u0442\u044c \u043f\u0440\u043e\u0434\u0435\u043c\u043e\u043d\u0441\u0442\u0440\u0438\u0440\u043e\u0432\u0430\u043d \u0432\u0437\u043b\u043e\u043c \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u043f\u043e\u0434\u0433\u043e\u0442\u043e\u0432\u043b\u0435\u043d\u043d\u043e\u0433\u043e […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-116911","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Google begint met het uitbetalen van beloningen voor het ontdekken van kwetsbaarheden in de KVM-hypervisor | ProHoster","description":"Google heeft het kvmCTF-initiatief ge\u00efntroduceerd, waarbij beveiligingsonderzoekers een financi\u00eble beloning kunnen krijgen voor het ontdekken van kwetsbaarheden in de KVM-hypervisor (Kernel-based Virtual Machine).","canonical_url":"https:\/\/prohoster.info\/nl\/blog\/news\/google-nachnyot-vyplachivat-voznagrazhdeniya-za-vyyavlenie-uyazvimostej-v-gipervizore-kvm","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"nl_NL","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47Google \u043d\u0430\u0447\u043d\u0451\u0442 \u0432\u044b\u043f\u043b\u0430\u0447\u0438\u0432\u0430\u0442\u044c \u0432\u043e\u0437\u043d\u0430\u0433\u0440\u0430\u0436\u0434\u0435\u043d\u0438\u044f \u0437\u0430 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u0433\u0438\u043f\u0435\u0440\u0432\u0438\u0437\u043e\u0440\u0435 KVM | ProHoster","og:description":"\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Google \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u043b\u0430 \u0438\u043d\u0438\u0446\u0438\u0430\u0442\u0438\u0432\u0443 kvmCTF, \u0432 \u0440\u0430\u043c\u043a\u0430\u0445 \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u043c\u043e\u0433\u0443\u0442 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u0435\u043d\u0435\u0436\u043d\u043e\u0435 \u0432\u043e\u0437\u043d\u0430\u0433\u0440\u0430\u0436\u0434\u0435\u043d\u0438\u0435 \u0437\u0430 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u0433\u0438\u043f\u0435\u0440\u0432\u0438\u0437\u043e\u0440\u0435 KVM (Kernel-based Virtual Machine).","og:url":"https:\/\/prohoster.info\/nl\/blog\/news\/google-nachnyot-vyplachivat-voznagrazhdeniya-za-vyyavlenie-uyazvimostej-v-gipervizore-kvm","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2024-07-03T16:05:54+00:00","article:modified_time":"2024-07-03T16:05:54+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"116911","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":"default","schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-01-23 03:22:19","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2026-01-23 03:22:19","updated":"2026-01-23 03:22:19","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/nl\/wp-json\/wp\/v2\/posts\/116911","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/nl\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/nl\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/nl\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/nl\/wp-json\/wp\/v2\/comments?post=116911"}],"version-history":[{"count":1,"href":"https:\/\/prohoster.info\/nl\/wp-json\/wp\/v2\/posts\/116911\/revisions"}],"predecessor-version":[{"id":164301,"href":"https:\/\/prohoster.info\/nl\/wp-json\/wp\/v2\/posts\/116911\/revisions\/164301"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/nl\/wp-json\/wp\/v2\/media?parent=116911"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/nl\/wp-json\/wp\/v2\/categories?post=116911"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/nl\/wp-json\/wp\/v2\/tags?post=116911"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}