{"id":157454,"date":"2026-02-08T11:12:03","date_gmt":"2026-02-08T09:12:03","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/ai-model-claude-opus-4-6-vyyavila-bolee-500-ranee-neizvestnyh-uyazvimostej"},"modified":"2026-02-08T11:12:03","modified_gmt":"2026-02-08T09:12:03","slug":"ai-model-claude-opus-4-6-vyyavila-bolee-500-ranee-neizvestnyh-uyazvimostej","status":"publish","type":"post","link":"https:\/\/prohoster.info\/ro\/blog\/news\/ai-model-claude-opus-4-6-vyyavila-bolee-500-ranee-neizvestnyh-uyazvimostej","title":{"rendered":"Modelul AI Claude Opus 4.6 a identificat peste 500 de vulnerabilit\u0103\u021bi anterior necunoscute.","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Compania Anthropic a anun\u021bat extinderea capacit\u0103\u021bilor modelului AI Claude Opus 4.6 \u00een c\u0103utarea vulnerabilit\u0103\u021bilor \u00een cod \u0219i a \u00eemp\u0103rt\u0103\u0219it rezultatele experimentului, \u00een cadrul c\u0103ruia au fost identificate peste 500 de vulnerabilit\u0103\u021bi anterior necunoscute (0-day) \u00een versiunile recente ale diverselor proiecte open source. Lucr\u0103rile au fost axate pe identificarea vulnerabilit\u0103\u021bilor cauzate de probleme \u00een gestionarea memoriei, deoarece acestea sunt mai u\u0219or de verificat. Fiec\u0103rei vulnerabilit\u0103\u021bi i-a fost atribuit un nivel ridicat de pericol. Fiecare vulnerabilitate a fost verificat\u0103 manual \u0219i confirmat\u0103 de angaja\u021bii Anthropic sau de cercet\u0103torii externi implica\u021bi. <\/p>\n

Pentru analiza vulnerabilit\u0103\u021bilor au fost folosite baze de cod din proiecte open source populare, care au fost supuse unui test continuu de fuzzing prin serviciul OSS-Fuzz. Spre deosebire de testarea prin fuzzing, \u00een care se genereaz\u0103 un flux de combina\u021bii aleatorii de date de intrare, modelul AI a \u00eencercat s\u0103 analizeze codul, av\u00e2nd \u00een vedere corec\u021biile anterioare pentru a identifica gre\u0219eli similare necorectate, eviden\u021biind tiparele problematice \u0219i deduc\u00e2nd logic ce date de intrare ar putea perturba fluxul execu\u021biei. <\/p>\n

Informa\u021biile despre vulnerabilit\u0103\u021bile identificate \u00een cadrul experimentului au \u00eenceput deja s\u0103 fie transmise administratorilor, cu care se colaboreaz\u0103 pentru a implementa corecturi. Pentru a ajuta administratorii \u00een timpul verific\u0103rilor, au fost elaborate manual patch-uri pentru a corecta problemele identificate. Ca exemplu, sunt prezentate trei vulnerabilit\u0103\u021bi \u00een GhostScript, OpenSC \u0219i CGIF, care la momentul public\u0103rii au fost remediate de c\u0103tre administratori. <\/p>\n

Cele utilizate pentru a identifica problemele de configurare nu au fost asem\u0103n\u0103toare sistemelor tradi\u021bionale de c\u0103utare automat\u0103 a vulnerabilit\u0103\u021bilor \u2014 modelul Claude Opus 4.6 a fost furnizat acces la ma\u0219ina virtual\u0103<\/a>, \u00een care, pe l\u00e2ng\u0103 codul investigat, au fost instalate instrumente tipice pentru dezvoltatori (coreutils, Python etc.) \u0219i utilitare pentru depanare \u0219i analiz\u0103 a vulnerabilit\u0103\u021bilor (inclusiv utilitare pentru testarea fuzzing). Modelului nu i s-a dat o instruc\u021biune clar\u0103 privind utilizarea acestor instrumente \u0219i nu s-au furnizat informa\u021bii speciale despre metodele de c\u0103utare a vulnerabilit\u0103\u021bilor. Modelului i s-a dat doar o sarcin\u0103 \u0219i oportunitatea de a ra\u021biona cu privire la utilizarea optim\u0103 a instrumentelor disponibile. <\/p>\n

\u00cen c\u0103utarea vulnerabilit\u0103\u021bilor \u00een GhostScript, modelul AI a \u00eencercat ini\u021bial s\u0103 efectueze teste fuzzing, dar c\u00e2nd acest lucru nu a dat rezultate, s-a mutat la analiza codului. Analiza codului nu a dus nici ea la rezultate, iar atunci modelul a \u00eenceput s\u0103 studieze istoricul modific\u0103rilor \u00een git \u0219i, \u00eentr-unul dintre commit-uri, a observat men\u021biunea despre verificarea limitelor buffer-ului. Dup\u0103 analizarea commit-ului, modelul a stabilit c\u0103 corectarea ad\u0103uga o verificare lips\u0103 a limitelor buffer-ului \u00een procesarea fonturilor. <\/p>\n

Apoi, modelul a identificat codul care a fost anterior corect\u0103rii \u0219i a \u00eencercat s\u0103 g\u0103seasc\u0103 \u00een restul codului tipare similare de utilizare a func\u021biei problematici care r\u0103m\u00e2neau necorrigate. \u00cen final, \u00een fi\u0219ierul gdevpsfx.c a fost identificat un apel al func\u021biei gs_type1_blend f\u0103r\u0103 o verificare a corectitudinii valorilor. La final, modelul a selectat con\u021binutul unui fi\u0219ier, al c\u0103rui procesare a dus la o \u00eencheiere abrupt\u0103 din cauza scrierii de date \u00eentr-o zon\u0103 de memorie dincolo de buffer-ul alocat. <\/p>\n

\u00cen CGIF, modelul AI s-a bazat pe faptul c\u0103, la decompresia fi\u0219ierelor GIF, biblioteca considera c\u0103 dimensiunea datelor comprimate este \u00eentotdeauna mai mic\u0103 dec\u00e2t a celor decompresate. C\u0103utarea vulnerabilit\u0103\u021bii s-a concentrat pe determinarea condi\u021biilor \u00een care datele comprimate prin algoritmul LZW erau mai mari dec\u00e2t cele decompresate. Astfel de condi\u021bii au fost identificate, iar modelul AI a putut forma un fi\u0219ier GIT, procesarea c\u0103ruia a dus la o dep\u0103\u0219ire a buffer-ului. \u00cen OpenSC, problema a fost identificat\u0103 dup\u0103 analiza utiliz\u0103rii \u00een cod a func\u021biilor poten\u021bial periculoase strrchr \u0219i strcat. <\/p>\n

Se observ\u0103 c\u0103 modelele lingvistice au atins un nivel care le permite s\u0103 identifice vulnerabilit\u0103\u021bi anterior necunoscute \u0219i c\u0103 \u00een cur\u00e2nd vor dep\u0103\u0219i exper\u021bii \u00een securitate prin viteza \u0219i amploarea c\u0103ut\u0103rii de vulnerabilit\u0103\u021bi. Se presupune c\u0103 cre\u0219terea num\u0103rului de vulnerabilit\u0103\u021bi identificate va necesita reformarea proceselor existente de divulgare a informa\u021biilor, deoarece cele 90 de zile alocate pentru remedieri nu vor fi suficiente.
\n
Sursa: opennet.ro<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Anthropic \u043e\u0431\u044a\u044f\u0432\u0438\u043b\u0430 \u043e \u0440\u0430\u0441\u0448\u0438\u0440\u0435\u043d\u0438\u0438 \u0432 AI-\u043c\u043e\u0434\u0435\u043b\u0438 Claude Opus 4.6 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u0435\u0439 \u043f\u043e \u043f\u043e\u0438\u0441\u043a\u0443 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u043a\u043e\u0434\u0435 \u0438 \u043f\u043e\u0434\u0435\u043b\u0438\u043b\u0430\u0441\u044c \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u0430\u043c\u0438 \u044d\u043a\u0441\u043f\u0435\u0440\u0438\u043c\u0435\u043d\u0442\u0430, \u0432 \u0445\u043e\u0434\u0435 \u043a\u043e\u0442\u043e\u0440\u043e\u0433\u043e \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u043e \u0431\u043e\u043b\u0435\u0435 500 \u0440\u0430\u043d\u0435\u0435 \u043d\u0435\u0438\u0437\u0432\u0435\u0441\u0442\u043d\u044b\u0445 (0-day) \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0438\u0445 \u0432\u0435\u0440\u0441\u0438\u044f\u0445 \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u0445 \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u0445 \u043f\u0440\u043e\u0435\u043a\u0442\u043e\u0432. \u0420\u0430\u0431\u043e\u0442\u0430 \u0431\u044b\u043b\u0430 \u0441\u0444\u043e\u043a\u0443\u0441\u0438\u0440\u043e\u0432\u0430\u043d\u0430 \u043d\u0430 \u043f\u043e\u0438\u0441\u043a\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u0432\u044b\u0437\u0432\u0430\u043d\u043d\u044b\u0445 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430\u043c\u0438 \u043f\u0440\u0438 \u0440\u0430\u0431\u043e\u0442\u0435 \u0441 \u043f\u0430\u043c\u044f\u0442\u044c\u044e, \u0442\u0430\u043a \u043a\u0430\u043a \u0438\u0445 \u043d\u0430\u043b\u0438\u0447\u0438\u0435 \u043f\u0440\u043e\u0449\u0435 \u043f\u0440\u043e\u0432\u0435\u0440\u0438\u0442\u044c. \u0412\u0441\u0435\u043c […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":8,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-157454","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Modelul AI Claude Opus 4.6 a identificat peste 500 de vulnerabilit\u0103\u021bi anterior necunoscute | ProHoster","description":"Compania Anthropic a anun\u021bat extinderea capacit\u0103\u021bilor modelului AI Claude Opus 4.6 pentru a c\u0103uta vulnerabilit\u0103\u021bi \u00een cod \u0219i a \u00eemp\u0103rt\u0103\u0219it rezultatele unui experiment \u00een care au fost descoperite peste 500 de vulnerabilit\u0103\u021bi anterior necunoscute (0-day).","canonical_url":"https:\/\/prohoster.info\/ro\/blog\/news\/ai-model-claude-opus-4-6-vyyavila-bolee-500-ranee-neizvestnyh-uyazvimostej","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"ro_RO","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47AI-\u043c\u043e\u0434\u0435\u043b\u044c Claude Opus 4.6 \u0432\u044b\u044f\u0432\u0438\u043b\u0430 \u0431\u043e\u043b\u0435\u0435 500 \u0440\u0430\u043d\u0435\u0435 \u043d\u0435\u0438\u0437\u0432\u0435\u0441\u0442\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 | ProHoster","og:description":"\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Anthropic \u043e\u0431\u044a\u044f\u0432\u0438\u043b\u0430 \u043e \u0440\u0430\u0441\u0448\u0438\u0440\u0435\u043d\u0438\u0438 \u0432 AI-\u043c\u043e\u0434\u0435\u043b\u0438 Claude Opus 4.6 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u0435\u0439 \u043f\u043e \u043f\u043e\u0438\u0441\u043a\u0443 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u043a\u043e\u0434\u0435 \u0438 \u043f\u043e\u0434\u0435\u043b\u0438\u043b\u0430\u0441\u044c \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u0430\u043c\u0438 \u044d\u043a\u0441\u043f\u0435\u0440\u0438\u043c\u0435\u043d\u0442\u0430, \u0432 \u0445\u043e\u0434\u0435 \u043a\u043e\u0442\u043e\u0440\u043e\u0433\u043e \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u043e \u0431\u043e\u043b\u0435\u0435 500 \u0440\u0430\u043d\u0435\u0435 \u043d\u0435\u0438\u0437\u0432\u0435\u0441\u0442\u043d\u044b\u0445 (0-day).","og:url":"https:\/\/prohoster.info\/ro\/blog\/news\/ai-model-claude-opus-4-6-vyyavila-bolee-500-ranee-neizvestnyh-uyazvimostej","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2026-02-08T09:12:03+00:00","article:modified_time":"2026-02-08T09:12:03+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"157454","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":"default","schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-02-08 09:12:54","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2026-02-08 09:12:03","updated":"2026-02-08 09:12:54","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/157454","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/users\/8"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/comments?post=157454"}],"version-history":[{"count":1,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/157454\/revisions"}],"predecessor-version":[{"id":164240,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/157454\/revisions\/164240"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/media?parent=157454"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/categories?post=157454"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/tags?post=157454"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}