NVD

Id
43448  
Name
CVE-2012-1568  
Description
The ExecShield feature in a certain Red Hat patch for the Linux kernel in Red Hat Enterprise Linux (RHEL) 5 and 6 and Fedora 15 and 16 does not properly handle use of many shared libraries by a 32-bit executable file, which makes it easier for context-dependent attackers to bypass the ASLR protection mechanism by leveraging a predictable base address for one of these libraries.  
Reject
 
CVSS Version
2  
CVSS Score
1.9  
Severity
Low  
CVSS Base Score
1.9  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
3.4  
CVSS Vector
(AV:L/AC:M/Au:N/C:N/I:P/A:N)  
Pub Date
2017-01-19  
Published
2013-03-01  
Modified Date
2013-03-01  
Seq
2012-1568  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
218313 43448 CVE-2012-1568 [oss-security] 20120321 Re: CVE request -- kernel: execshield: predictable ascii armour base address  View
218314 43448 CVE-2012-1568 http://scarybeastsecurity.blogspot.com/2012/03/some-random-observations-on-linux-aslr.html  View
218315 43448 CVE-2012-1568 [oss-security] 20120320 Re: CVE request -- kernel: execshield: predictable ascii armour base address  View
218316 43448 CVE-2012-1568 https://bugzilla.redhat.com/show_bug.cgi?id=804947  View
218317 43448 CVE-2012-1568 https://oss.oracle.com/git/?p=redpatch.git;a=commit;h=302a4fc15aebf202b6dffd6c804377c6058ee6e4  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
30255 JVNDB-2012-005962 Red Hat Enterprise Linux および Fedora における ASLR 保護メカニズムを回避される脆弱性 Red Hat Enterprise Linux (RHEL) および Fedora の Linux Kernel に対する特定の Red Hat パッチ内の ExecShield 機能は、32-bit 実行ファイルによる多数の共有ライブラリの使用を適切に処理しないため、ASLR 保護メカニズムを回避される脆弱性が存在します。 CVE-2012-1568 54806 CVE-2012-1568 43448 1.9 http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-005962.html 2012-03-15 2013-03-04 View