The ExecShield feature in a certain Red Hat patch for the Linux kernel in Red Hat Enterprise Linux (RHEL) 5 and 6 and Fedora 15 and 16 does not properly handle use of many shared libraries by a 32-bit executable file, which makes it easier for context-dependent attackers to bypass the ASLR protection mechanism by leveraging a predictable base address for one of these libraries.
CVSS Details
- CVSS 3.1 Base Score: 2.5
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernel-headersUpgrade kernel-docUpgrade kernel-debugUpgrade kernel-xenUpgrade kernel-PAEUpgrade kernel-xen-develUpgrade python-perfUpgrade kernel-develUpgrade kernel-PAE-develUpgrade perfUpgrade kernel-debug-develUpgrade kernel-firmwareUpgrade kernel | Dec 1, 2016 | Mar 1, 2013 |
| Oracle_linux | — | Upgrade kernel | Oct 16, 2024 | Mar 1, 2013 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub