{"id":116911,"date":"2024-07-03T18:05:54","date_gmt":"2024-07-03T16:05:54","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/google-nachnyot-vyplachivat-voznagrazhdeniya-za-vyyavlenie-uyazvimostej-v-gipervizore-kvm"},"modified":"2024-07-03T18:05:54","modified_gmt":"2024-07-03T16:05:54","slug":"google-nachnyot-vyplachivat-voznagrazhdeniya-za-vyyavlenie-uyazvimostej-v-gipervizore-kvm","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sq\/blog\/news\/google-nachnyot-vyplachivat-voznagrazhdeniya-za-vyyavlenie-uyazvimostej-v-gipervizore-kvm","title":{"rendered":"Google do t\u00eb filloj\u00eb t\u00eb paguaj\u00eb shp\u00ebrblime p\u00ebr zbulimin e cenueshm\u00ebrive n\u00eb hipervizorin KVM","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Google ka prezantuar nism\u00ebn kvmCTF, n\u00eb kuad\u00ebr t\u00eb s\u00eb cil\u00ebs studiuesit e siguris\u00eb mund t\u00eb marrin shp\u00ebrblime monetare p\u00ebr zbulimin e cenueshm\u00ebrive n\u00eb hipervizorin KVM (Kernel-based Virtual Machine). Interesi i Google p\u00ebr KVM lidhet me p\u00ebrdorimin e k\u00ebtij hipervizori n\u00eb sh\u00ebrbimin Google Cloud, si edhe n\u00eb platformat Android dhe ChromeOS (CrosVM bazohet n\u00eb KVM). P\u00ebr t\u00eb marr\u00eb shp\u00ebrblimin, duhet t\u00eb demonstrohet komprometimi i nj\u00eb mjedisi CTF (Capture the Flag) t\u00eb p\u00ebrgatitur posa\u00e7\u00ebrisht, mbi baz\u00ebn e nj\u00eb kerneli Linux t\u00eb fundit, q\u00eb ekzekuton nj\u00eb makin\u00eb virtuale, qasja n\u00eb t\u00eb cil\u00ebn jepet me k\u00ebrkes\u00eb. Sulmuesit i propozohet t\u00eb shfryt\u00ebzoj\u00eb nj\u00eb cenueshm\u00ebri n\u00eb n\u00ebn-sistemin KVM<\/a> n\u00eb kernelin Linux, q\u00eb siguron funksionimin e sistemit host n\u00eb k\u00ebt\u00eb mjedis.<\/p>\n

P\u00ebr identifikimin e nj\u00eb dob\u00ebsie m\u00eb par\u00eb t\u00eb panjohur, e cila mund\u00ebson daljen nga makina virtuale, parashikohet nj\u00eb shp\u00ebrblim prej 250 mij\u00eb dollar\u00ebsh, nd\u00ebrsa p\u00ebr dob\u00ebsit\u00eb q\u00eb lejojn\u00eb shkruarjen n\u00eb nj\u00eb zon\u00eb t\u00eb \u00e7far\u00ebdo t\u00eb memorjes, shp\u00ebrblimi \u00ebsht\u00eb 100 mij\u00eb dollar\u00eb. P\u00ebr dob\u00ebsit\u00eb q\u00eb \u00e7ojn\u00eb n\u00eb leximin nga nj\u00eb zon\u00eb e \u00e7far\u00ebdo e memorjes ose shkruarjen n\u00eb zona t\u00eb af\u00ebrta t\u00eb memorjes, \u00ebsht\u00eb shpallur nj\u00eb shp\u00ebrblim prej 50 mij\u00eb dollar\u00ebsh, p\u00ebr dob\u00ebsin\u00eb DoS \u00ebsht\u00eb 20 mij\u00eb dollar\u00eb, dhe p\u00ebr leximin nga nj\u00eb zon\u00eb t\u00eb af\u00ebrt t\u00eb memorjes \u00ebsht\u00eb 10 mij\u00eb dollar\u00eb. Shp\u00ebrblimi p\u00ebr shkruarje ose lexim n\u00eb nj\u00eb zon\u00eb t\u00eb \u00e7far\u00ebdo t\u00eb memorjes mund t\u00eb merret duke ndryshuar ose marr\u00eb vler\u00ebn e nj\u00eb adrese specifike n\u00eb memorje, dhe n\u00eb rastin e zonave t\u00eb af\u00ebrta, p\u00ebr gabimet e njohura nga mjeti i debugs KASAN (Kernel address sanitizer), si\u00e7 jan\u00eb tejkalimi i buffers ose qasja n\u00eb nj\u00eb zon\u00eb memorjeje tashm\u00eb t\u00eb \u00e7liruar. Shp\u00ebrblimi p\u00ebr dob\u00ebsin\u00eb DoS jepet kur identifikohet dergimi i nj\u00eb referenc\u00eb t\u00eb zbraz\u00ebt (null-ptr-deref n\u00eb KASAN).
\n
Burimi: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Google \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u043b\u0430 \u0438\u043d\u0438\u0446\u0438\u0430\u0442\u0438\u0432\u0443 kvmCTF, \u0432 \u0440\u0430\u043c\u043a\u0430\u0445 \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u043c\u043e\u0433\u0443\u0442 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u0435\u043d\u0435\u0436\u043d\u043e\u0435 \u0432\u043e\u0437\u043d\u0430\u0433\u0440\u0430\u0436\u0434\u0435\u043d\u0438\u0435 \u0437\u0430 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u0433\u0438\u043f\u0435\u0440\u0432\u0438\u0437\u043e\u0440\u0435 KVM (Kernel-based Virtual Machine). \u0418\u043d\u0442\u0435\u0440\u0435\u0441 Google \u043a KVM \u043e\u0431\u0443\u0441\u043b\u043e\u0432\u043b\u0435\u043d \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u0434\u0430\u043d\u043d\u043e\u0433\u043e \u0433\u0438\u043f\u0435\u0440\u0432\u0438\u0437\u043e\u0440\u0430 \u0432 \u0441\u0435\u0440\u0432\u0438\u0441\u0435 Google Cloud, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0432 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u0430\u0445 Android \u0438 ChromeOS (CrosVM \u043e\u0441\u043d\u043e\u0432\u0430\u043d \u043d\u0430 KVM). \u0414\u043b\u044f \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u044f \u0432\u043e\u0437\u043d\u0430\u0433\u0440\u0430\u0436\u0434\u0435\u043d\u0438\u044f \u0434\u043e\u043b\u0436\u0435\u043d \u0431\u044b\u0442\u044c \u043f\u0440\u043e\u0434\u0435\u043c\u043e\u043d\u0441\u0442\u0440\u0438\u0440\u043e\u0432\u0430\u043d \u0432\u0437\u043b\u043e\u043c \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u043f\u043e\u0434\u0433\u043e\u0442\u043e\u0432\u043b\u0435\u043d\u043d\u043e\u0433\u043e […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-116911","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Google do t\u00eb filloj\u00eb t\u00eb paguaj\u00eb shp\u00ebrblime p\u00ebr zbulimin e cenueshm\u00ebrive n\u00eb hipervizorin KVM | ProHoster","description":"Google ka prezantuar nism\u00ebn kvmCTF, n\u00eb kuad\u00ebr t\u00eb s\u00eb cil\u00ebs studiuesit e siguris\u00eb mund t\u00eb marrin shp\u00ebrblime monetare p\u00ebr zbulimin e cenueshm\u00ebrive n\u00eb hipervizorin KVM (Kernel-based Virtual Machine).","canonical_url":"https:\/\/prohoster.info\/sq\/blog\/news\/google-nachnyot-vyplachivat-voznagrazhdeniya-za-vyyavlenie-uyazvimostej-v-gipervizore-kvm","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"sq_AL","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47Google \u043d\u0430\u0447\u043d\u0451\u0442 \u0432\u044b\u043f\u043b\u0430\u0447\u0438\u0432\u0430\u0442\u044c \u0432\u043e\u0437\u043d\u0430\u0433\u0440\u0430\u0436\u0434\u0435\u043d\u0438\u044f \u0437\u0430 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u0433\u0438\u043f\u0435\u0440\u0432\u0438\u0437\u043e\u0440\u0435 KVM | ProHoster","og:description":"\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Google \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u043b\u0430 \u0438\u043d\u0438\u0446\u0438\u0430\u0442\u0438\u0432\u0443 kvmCTF, \u0432 \u0440\u0430\u043c\u043a\u0430\u0445 \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u043c\u043e\u0433\u0443\u0442 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u0435\u043d\u0435\u0436\u043d\u043e\u0435 \u0432\u043e\u0437\u043d\u0430\u0433\u0440\u0430\u0436\u0434\u0435\u043d\u0438\u0435 \u0437\u0430 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u0433\u0438\u043f\u0435\u0440\u0432\u0438\u0437\u043e\u0440\u0435 KVM (Kernel-based Virtual Machine).","og:url":"https:\/\/prohoster.info\/sq\/blog\/news\/google-nachnyot-vyplachivat-voznagrazhdeniya-za-vyyavlenie-uyazvimostej-v-gipervizore-kvm","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2024-07-03T16:05:54+00:00","article:modified_time":"2024-07-03T16:05:54+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"116911","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":"default","schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-01-23 03:22:19","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2026-01-23 03:22:19","updated":"2026-01-23 03:22:19","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/116911","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/comments?post=116911"}],"version-history":[{"count":1,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/116911\/revisions"}],"predecessor-version":[{"id":164301,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/116911\/revisions\/164301"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/media?parent=116911"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/categories?post=116911"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/tags?post=116911"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}