PT-2013-1527 · Linux+3 · Linux Kernel+4

Petr Matousek · Published 2012-11-06 · Updated 2023-02-13 · CVE-2012-1568

Positive Technologies (AI Summary)

CVSS v2.0

1.9

Low

Base vector

AV:L/AC:M/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Red Hat Enterprise Linux (RHEL) versions 5 and 6 Fedora versions 15 and 16

Description The ExecShield feature in a certain Red Hat patch for the Linux kernel does not properly handle use of many shared libraries by a 32-bit executable file. This makes it easier for context-dependent attackers to bypass the ASLR protection mechanism by leveraging a predictable base address for one of these libraries.

Recommendations For Red Hat Enterprise Linux (RHEL) versions 5 and 6, consider applying a patch to fix the ExecShield feature. For Fedora versions 15 and 16, consider applying a patch to fix the ExecShield feature. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CESA-2012_1426

CVE-2012-1568

RHSA-2012:1426

RHSA-2012_1426

RHSA-2013:0168

RHSA-2013_0168

Affected Products

Centos

Fedora

Linux Kernel

Red Hat

Suse

References · 27

• https://linux.oracle.com/errata/ELSA-2012-1426.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2012-1568 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-2133 · Security Note
• https://bdu.fstec.ru/vul/2015-01796 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-1568 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3511 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3400 · Security Note
• https://github.com/torvalds/linux/commit/9ab4233dd08036fe34a89c7dc6f47a8bf2eb29eb · Note
• https://github.com/torvalds/linux/commit/adee11b2085bee90bd8f4f52123ffb07882d6256 · Note
• https://lists.centos.org/pipermail/centos-announce/2012-November/081136.html · Note
• https://oss.oracle.com/git/?p=redpatch.git%3Ba=commit%3Bh=302a4fc15aebf202b6dffd6c804377c6058ee6e4 · Note
• https://access.redhat.com/errata/RHSA-2013:0168 · Note
• http://openwall.com/lists/oss-security/2012/03/20/4 · Note
• https://access.redhat.com/errata/RHSA-2012:1426 · Note
• https://lists.centos.org/pipermail/centos-announce/2012-November/055893.html · Note