Linux Kernel ASLR Security Restriction Bypass Vulnerability

Release date: 2012-03-21
Updated on: 2012-03-26

Affected Systems:
RedHat Fedora 16
Description:
--------------------------------------------------------------------------------
Bugtraq id: 52687
Cve id: CVE-2012-1568

Linux Kernel is the Kernel of the Linux operating system.

When Linux Kernel runs a binary file with many shared libraries, it uses a predictable base address for one of the loaded libraries to bypass ASLR.

<* Source: Chris Evans (chris@ferret.lmh.ox.ac.uk)

Link: https://bugzilla.redhat.com/show_bug.cgi? Id = 804947

*>

Suggestion:
--------------------------------------------------------------------------------
Vendor patch:

RedHat
------
The vendor has released a patch to fix this security problem. Please download it from the vendor's homepage:

Http://www.redhat.com/apps/support/errata/index.html