{"id":103363,"date":"2022-02-17T09:36:39","date_gmt":"2022-02-17T07:36:39","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/google-uvelichil-razmer-voznagrazhdenij-za-vyyavlenie-uyazvimostej-v-yadre-linux-i-kubernetes"},"modified":"2022-02-17T09:36:39","modified_gmt":"2022-02-17T07:36:39","slug":"google-uvelichil-razmer-voznagrazhdenij-za-vyyavlenie-uyazvimostej-v-yadre-linux-i-kubernetes","status":"publish","type":"post","link":"https:\/\/prohoster.info\/ro\/blog\/news\/google-uvelichil-razmer-voznagrazhdenij-za-vyyavlenie-uyazvimostej-v-yadre-linux-i-kubernetes","title":{"rendered":"Google a crescut m\u0103rimea recompenselor pentru identificarea vulnerabilit\u0103\u021bilor \u00een nucleul Linux \u0219i Kubernetes.","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Compania Google a anun\u021bat extinderea ini\u021biativei de plat\u0103 a recompenselor pentru identificarea problemelor de securitate din nucleul Linux, platforma de orchestrare a containerelor Kubernetes, motorul GKE (Google Kubernetes Engine) \u0219i mediu pentru competi\u021bii de c\u0103utare a vulnerabilit\u0103\u021bilor kCTF (Kubernetes Capture the Flag). <\/p>\n

Programul de recompense a fost extins prin introducerea unor bonusuri suplimentare de 20.000 de dolari pentru vulnerabilit\u0103\u021bile 0-day, pentru exploitatele care nu necesit\u0103 activarea suportului pentru spa\u021biile de nume ale utilizatorilor (user namespaces) \u0219i pentru demonstrarea unor noi metode de exploatare. Plata de baz\u0103 pentru demonstrarea unui exploit func\u021bional \u00een kCTF este de 31.337 de dolari (plata de baz\u0103 se face participantului care demonstreaz\u0103 primul un exploit func\u021bional, dar bonusurile pot fi aplicate \u0219i pentru exploitatele ulterioare pentru aceea\u0219i vulnerabilitate). <\/p>\n

\u00cen total, av\u00e2nd \u00een vedere bonusurile, suma maxim\u0103 a recompenselor pentru un exploit de 1 zi (probleme identificate pe baza analizei corect\u0103rilor din cod, care nu sunt marcate ca vulnerabilit\u0103\u021bi) poate ajunge la 71337 de dolari (a fost 31337 de dolari), iar pentru un exploit de 0 zile (probleme pentru care nu exist\u0103 \u00eenc\u0103 o solu\u021bie) \u2014 91337 de dolari (a fost 50337 de dolari). Programul de recompense va fi valabil p\u00e2n\u0103 pe 31 decembrie 2022. <\/p>\n

Se men\u021bioneaz\u0103 c\u0103 \u00een ultimele trei luni, Google a procesat 9 cereri cu informa\u021bii despre vulnerabilit\u0103\u021bi, pentru care au fost pl\u0103tite 175.000 de dolari. Cercet\u0103torii participan\u021bi au preg\u0103tit cinci exploate pentru vulnerabilit\u0103\u021bile 0-day \u0219i dou\u0103 pentru vulnerabilit\u0103\u021bile 1-day. Privind trei probleme deja corectate \u00een nucleul Linux (CVE-2021-4154 \u00een cgroup-v1, CVE-2021-22600 \u00een af_packet \u0219i CVE-2022-0185 \u00een VFS), informa\u021biile au fost dezv\u0103luite public (problemele men\u021bionate au fost deja identificate prin Syzkaller \u0219i pentru dou\u0103 probleme din nucleu au fost ad\u0103ugate corec\u021bii).
\n
Sursa: opennet.ro<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Google \u043e\u0431\u044a\u044f\u0432\u0438\u043b\u0430 \u043e \u0440\u0430\u0441\u0448\u0438\u0440\u0435\u043d\u0438\u0438 \u0438\u043d\u0438\u0446\u0438\u0430\u0442\u0438\u0432\u044b \u043f\u043e \u0432\u044b\u043f\u043b\u0430\u0442\u0435 \u0434\u0435\u043d\u0435\u0436\u043d\u044b\u0445 \u0432\u043e\u0437\u043d\u0430\u0433\u0440\u0430\u0436\u0434\u0435\u043d\u0438\u0439 \u0437\u0430 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0438\u0435 \u043f\u0440\u043e\u0431\u043b\u0435\u043c \u0441 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u044c\u044e \u0432 \u044f\u0434\u0440\u0435 Linux, \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u0435 \u0434\u043b\u044f \u043e\u0440\u043a\u0435\u0441\u0442\u0440\u043e\u0432\u043a\u0438 \u043a\u043e\u043d\u0442\u0435\u0439\u043d\u0435\u0440\u043e\u0432 Kubernetes, \u0434\u0432\u0438\u0436\u043a\u0435 GKE (Google Kubernetes Engine) \u0438 \u043e\u043a\u0440\u0443\u0436\u0435\u043d\u0438\u0438 \u0434\u043b\u044f \u043f\u0440\u043e\u0432\u0435\u0434\u0435\u043d\u0438\u044f \u0441\u043e\u0440\u0435\u0432\u043d\u043e\u0432\u0430\u043d\u0438\u0439 \u043f\u043e \u043f\u043e\u0438\u0441\u043a\u0443 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 kCTF (Kubernetes Capture the Flag). \u0412 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u0443 \u0432\u043e\u0437\u043d\u0430\u0433\u0440\u0430\u0436\u0434\u0435\u043d\u0438\u0439 \u0432\u0432\u0435\u0434\u0435\u043d\u044b \u0434\u043e\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0435 \u0431\u043e\u043d\u0443\u0441\u043d\u044b\u0435 \u0432\u044b\u043f\u043b\u0430\u0442\u044b \u0440\u0430\u0437\u043c\u0435\u0440\u043e\u043c 20 \u0442\u044b\u0441\u044f\u0447 \u0434\u043e\u043b\u043b\u0430\u0440\u043e\u0432 \u0437\u0430 0-day \u0443\u044f\u0432\u0437\u0438\u043c\u043e\u0441\u0442\u0438, […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-103363","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Google a crescut valoarea recompenselor pentru identificarea vulnerabilit\u0103\u021bilor \u00een nucleul Linux \u0219i Kubernetes | ProHoster","description":"Compania Google a anun\u021bat extinderea ini\u021biativei de plat\u0103 a recompenselor pentru identificarea problemelor de securitate din nucleul Linux, platforma de orchestrare a containerelor Kubernetes, motorul GKE (Google Kubernetes.","canonical_url":"https:\/\/prohoster.info\/ro\/blog\/news\/google-uvelichil-razmer-voznagrazhdenij-za-vyyavlenie-uyazvimostej-v-yadre-linux-i-kubernetes","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"ro_RO","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47Google \u0443\u0432\u0435\u043b\u0438\u0447\u0438\u043b \u0440\u0430\u0437\u043c\u0435\u0440 \u0432\u043e\u0437\u043d\u0430\u0433\u0440\u0430\u0436\u0434\u0435\u043d\u0438\u0439 \u0437\u0430 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u044f\u0434\u0440\u0435 Linux \u0438 Kubernetes | ProHoster","og:description":"\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Google \u043e\u0431\u044a\u044f\u0432\u0438\u043b\u0430 \u043e \u0440\u0430\u0441\u0448\u0438\u0440\u0435\u043d\u0438\u0438 \u0438\u043d\u0438\u0446\u0438\u0430\u0442\u0438\u0432\u044b \u043f\u043e \u0432\u044b\u043f\u043b\u0430\u0442\u0435 \u0434\u0435\u043d\u0435\u0436\u043d\u044b\u0445 \u0432\u043e\u0437\u043d\u0430\u0433\u0440\u0430\u0436\u0434\u0435\u043d\u0438\u0439 \u0437\u0430 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0438\u0435 \u043f\u0440\u043e\u0431\u043b\u0435\u043c \u0441 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u044c\u044e \u0432 \u044f\u0434\u0440\u0435 Linux, \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u0435 \u0434\u043b\u044f \u043e\u0440\u043a\u0435\u0441\u0442\u0440\u043e\u0432\u043a\u0438 \u043a\u043e\u043d\u0442\u0435\u0439\u043d\u0435\u0440\u043e\u0432 Kubernetes, \u0434\u0432\u0438\u0436\u043a\u0435 GKE (Google Kubernetes.","og:url":"https:\/\/prohoster.info\/ro\/blog\/news\/google-uvelichil-razmer-voznagrazhdenij-za-vyyavlenie-uyazvimostej-v-yadre-linux-i-kubernetes","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2022-02-17T07:36:39+00:00","article:modified_time":"2022-02-17T07:36:39+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"103363","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":"default","schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2022-02-17 07:37:37","updated":"2022-10-04 20:43:35","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/103363","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/comments?post=103363"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/103363\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/media?parent=103363"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/categories?post=103363"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/tags?post=103363"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}