CVE-2012-1568 Security feature bypass in n/a

Low 1.9 Published Updated

Attackers can bypass ASLR protection in Red Hat Linux kernels by exploiting predictable library base addresses in 32-bit executables.

Exploited in the wild
Not known
Login needed
Any signed-in user
Attackable
Local or same network only
Victim action needed
Not needed
Fix
Available

What is CVE-2012-1568?

CVE-2012-1568 is a low-severity vulnerability in Fedoraproject Fedora, published on 1 Mar 2013. It can only be exploited from the same machine or local network, with no action from the victim.

Official description

The ExecShield feature in a certain Red Hat patch for the Linux kernel in Red Hat Enterprise Linux (RHEL) 5 and 6 and Fedora 15 and 16 does not properly handle use of many shared libraries by a 32-bit executable file, which makes it easier for context-dependent attackers to bypass the ASLR protection mechanism by leveraging a predictable base address for one of these libraries.

Which versions are affected by CVE-2012-1568?

It affects 2 products.

Products include Fedoraproject Fedora, Redhat Enterprise Linux.

How do I fix CVE-2012-1568?

Apply the vendor's patch.

Is CVE-2012-1568 being exploited?

There is no known exploitation of CVE-2012-1568 in the wild and no public exploit code.

All Fedoraproject Fedora vulnerabilities

Sources

Also known as GHSA-vp43-m2w7-p2vc.

Is CVE-2012-1568 in your software?

Upload an SBOM and sbomify checks it against every vulnerability here, every day.

Check your SBOMs for free