CVE-2012-1568
The ExecShield feature in a certain Red Hat patch for the Linux kernel in Red Hat Enterprise...
The ExecShield feature in a certain Red Hat patch for the Linux kernel in Red Hat Enterprise Linux (RHEL) 5 and 6 and Fedora 15 and 16 does not properly handle use of many shared libraries by a 32-bit executable file, which makes it easier for context-dependent attackers to bypass the ASLR protection mechanism by leveraging a predictable base address for one of these libraries.
Exploit likelihood
What each source reports
NVD Score used
1.9
The ExecShield feature in a certain Red Hat patch for the Linux kernel in Red Hat Enterprise Linux (RHEL) 5 and 6 and Fedora 15 and 16 does not properly handle use of many shared libraries by a 32-bit executable file, which makes it easier for context-dependent attackers to bypass the ASLR protection mechanism by leveraging a predictable base address for one of these libraries.
- Record
CVE-2012-1568- CVSS 2.0
- 1.9 Low
AV:L/AC:M/Au:N/C:N/I:P/A:N - Updated
- 2026-11-02
CVE List No score
The ExecShield feature in a certain Red Hat patch for the Linux kernel in Red Hat Enterprise Linux (RHEL) 5 and 6 and Fedora 15 and 16 does not properly handle use of many shared libraries by a 32-bit executable file, which makes it easier for context-dependent attackers to bypass the ASLR protection mechanism by leveraging a predictable base address for one of these libraries.
- Record
CVE-2012-1568- Updated
- 2026-11-02
EUVDEUVD-2012-1586 No score
The ExecShield feature in a certain Red Hat patch for the Linux kernel in Red Hat Enterprise Linux (RHEL) 5 and 6 and Fedora 15 and 16 does not properly handle use of many shared libraries by a 32-bit executable file, which makes it easier for context-dependent attackers to bypass the ASLR protection mechanism by leveraging a predictable base address for one of these libraries.
- Record
EUVD-2012-1586- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-vp43-m2w7-p2vc No score
The ExecShield feature in a certain Red Hat patch for the Linux kernel in Red Hat Enterprise...
The ExecShield feature in a certain Red Hat patch for the Linux kernel in Red Hat Enterprise Linux (RHEL) 5 and 6 and Fedora 15 and 16 does not properly handle use of many shared libraries by a 32-bit executable file, which makes it easier for context-dependent attackers to bypass the ASLR protection mechanism by leveraging a predictable base address for one of these libraries.
- Record
GHSA-vp43-m2w7-p2vc- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
kernelRed Hat:enterprise_linux:6::client |
before 0:2.6.32-279.14.1.el6 | 0:2.6.32-279.14.1.el6 |
kernel-debugRed Hat:enterprise_linux:6::client |
before 0:2.6.32-279.14.1.el6 | 0:2.6.32-279.14.1.el6 |
kernel-debug-debuginfoRed Hat:enterprise_linux:6::client |
before 0:2.6.32-279.14.1.el6 | 0:2.6.32-279.14.1.el6 |
kernel-debug-develRed Hat:enterprise_linux:6::client |
before 0:2.6.32-279.14.1.el6 | 0:2.6.32-279.14.1.el6 |
kernel-debuginfoRed Hat:enterprise_linux:6::client |
before 0:2.6.32-279.14.1.el6 | 0:2.6.32-279.14.1.el6 |
kernel-debuginfo-common-i686Red Hat:enterprise_linux:6::client |
before 0:2.6.32-279.14.1.el6 | 0:2.6.32-279.14.1.el6 |
kernel-debuginfo-common-x86_64Red Hat:enterprise_linux:6::client |
before 0:2.6.32-279.14.1.el6 | 0:2.6.32-279.14.1.el6 |
kernel-develRed Hat:enterprise_linux:6::client |
before 0:2.6.32-279.14.1.el6 | 0:2.6.32-279.14.1.el6 |
kernel-docRed Hat:enterprise_linux:6::client |
before 0:2.6.32-279.14.1.el6 | 0:2.6.32-279.14.1.el6 |
kernel-firmwareRed Hat:enterprise_linux:6::client |
before 0:2.6.32-279.14.1.el6 | 0:2.6.32-279.14.1.el6 |
Show 73 moreShow less
| Package | Affected | Fixed |
|---|---|---|
kernel-headersRed Hat:enterprise_linux:6::client |
before 0:2.6.32-279.14.1.el6 | 0:2.6.32-279.14.1.el6 |
perfRed Hat:enterprise_linux:6::client |
before 0:2.6.32-279.14.1.el6 | 0:2.6.32-279.14.1.el6 |
perf-debuginfoRed Hat:enterprise_linux:6::client |
before 0:2.6.32-279.14.1.el6 | 0:2.6.32-279.14.1.el6 |
python-perf-debuginfoRed Hat:enterprise_linux:6::client |
before 0:2.6.32-279.14.1.el6 | 0:2.6.32-279.14.1.el6 |
python-perfRed Hat:enterprise_linux:6::client |
before 0:2.6.32-279.14.1.el6 | 0:2.6.32-279.14.1.el6 |
kernelRed Hat:enterprise_linux:6::computenode |
before 0:2.6.32-279.14.1.el6 | 0:2.6.32-279.14.1.el6 |
kernel-debugRed Hat:enterprise_linux:6::computenode |
before 0:2.6.32-279.14.1.el6 | 0:2.6.32-279.14.1.el6 |
kernel-debug-debuginfoRed Hat:enterprise_linux:6::computenode |
before 0:2.6.32-279.14.1.el6 | 0:2.6.32-279.14.1.el6 |
kernel-debug-develRed Hat:enterprise_linux:6::computenode |
before 0:2.6.32-279.14.1.el6 | 0:2.6.32-279.14.1.el6 |
kernel-debuginfoRed Hat:enterprise_linux:6::computenode |
before 0:2.6.32-279.14.1.el6 | 0:2.6.32-279.14.1.el6 |
kernel-debuginfo-common-x86_64Red Hat:enterprise_linux:6::computenode |
before 0:2.6.32-279.14.1.el6 | 0:2.6.32-279.14.1.el6 |
kernel-develRed Hat:enterprise_linux:6::computenode |
before 0:2.6.32-279.14.1.el6 | 0:2.6.32-279.14.1.el6 |
kernel-docRed Hat:enterprise_linux:6::computenode |
before 0:2.6.32-279.14.1.el6 | 0:2.6.32-279.14.1.el6 |
kernel-firmwareRed Hat:enterprise_linux:6::computenode |
before 0:2.6.32-279.14.1.el6 | 0:2.6.32-279.14.1.el6 |
kernel-headersRed Hat:enterprise_linux:6::computenode |
before 0:2.6.32-279.14.1.el6 | 0:2.6.32-279.14.1.el6 |
perfRed Hat:enterprise_linux:6::computenode |
before 0:2.6.32-279.14.1.el6 | 0:2.6.32-279.14.1.el6 |
perf-debuginfoRed Hat:enterprise_linux:6::computenode |
before 0:2.6.32-279.14.1.el6 | 0:2.6.32-279.14.1.el6 |
python-perf-debuginfoRed Hat:enterprise_linux:6::computenode |
before 0:2.6.32-279.14.1.el6 | 0:2.6.32-279.14.1.el6 |
python-perfRed Hat:enterprise_linux:6::computenode |
before 0:2.6.32-279.14.1.el6 | 0:2.6.32-279.14.1.el6 |
kernelRed Hat:enterprise_linux:6::server |
before 0:2.6.32-279.14.1.el6 | 0:2.6.32-279.14.1.el6 |
kernel-bootwrapperRed Hat:enterprise_linux:6::server |
before 0:2.6.32-279.14.1.el6 | 0:2.6.32-279.14.1.el6 |
kernel-debugRed Hat:enterprise_linux:6::server |
before 0:2.6.32-279.14.1.el6 | 0:2.6.32-279.14.1.el6 |
kernel-debug-debuginfoRed Hat:enterprise_linux:6::server |
before 0:2.6.32-279.14.1.el6 | 0:2.6.32-279.14.1.el6 |
kernel-debug-develRed Hat:enterprise_linux:6::server |
before 0:2.6.32-279.14.1.el6 | 0:2.6.32-279.14.1.el6 |
kernel-debuginfoRed Hat:enterprise_linux:6::server |
before 0:2.6.32-279.14.1.el6 | 0:2.6.32-279.14.1.el6 |
kernel-debuginfo-common-i686Red Hat:enterprise_linux:6::server |
before 0:2.6.32-279.14.1.el6 | 0:2.6.32-279.14.1.el6 |
kernel-debuginfo-common-ppc64Red Hat:enterprise_linux:6::server |
before 0:2.6.32-279.14.1.el6 | 0:2.6.32-279.14.1.el6 |
kernel-debuginfo-common-s390xRed Hat:enterprise_linux:6::server |
before 0:2.6.32-279.14.1.el6 | 0:2.6.32-279.14.1.el6 |
kernel-debuginfo-common-x86_64Red Hat:enterprise_linux:6::server |
before 0:2.6.32-279.14.1.el6 | 0:2.6.32-279.14.1.el6 |
kernel-develRed Hat:enterprise_linux:6::server |
before 0:2.6.32-279.14.1.el6 | 0:2.6.32-279.14.1.el6 |
kernel-docRed Hat:enterprise_linux:6::server |
before 0:2.6.32-279.14.1.el6 | 0:2.6.32-279.14.1.el6 |
kernel-firmwareRed Hat:enterprise_linux:6::server |
before 0:2.6.32-279.14.1.el6 | 0:2.6.32-279.14.1.el6 |
kernel-headersRed Hat:enterprise_linux:6::server |
before 0:2.6.32-279.14.1.el6 | 0:2.6.32-279.14.1.el6 |
kernel-kdumpRed Hat:enterprise_linux:6::server |
before 0:2.6.32-279.14.1.el6 | 0:2.6.32-279.14.1.el6 |
kernel-kdump-debuginfoRed Hat:enterprise_linux:6::server |
before 0:2.6.32-279.14.1.el6 | 0:2.6.32-279.14.1.el6 |
kernel-kdump-develRed Hat:enterprise_linux:6::server |
before 0:2.6.32-279.14.1.el6 | 0:2.6.32-279.14.1.el6 |
perfRed Hat:enterprise_linux:6::server |
before 0:2.6.32-279.14.1.el6 | 0:2.6.32-279.14.1.el6 |
perf-debuginfoRed Hat:enterprise_linux:6::server |
before 0:2.6.32-279.14.1.el6 | 0:2.6.32-279.14.1.el6 |
python-perf-debuginfoRed Hat:enterprise_linux:6::server |
before 0:2.6.32-279.14.1.el6 | 0:2.6.32-279.14.1.el6 |
python-perfRed Hat:enterprise_linux:6::server |
before 0:2.6.32-279.14.1.el6 | 0:2.6.32-279.14.1.el6 |
kernelRed Hat:enterprise_linux:6::workstation |
before 0:2.6.32-279.14.1.el6 | 0:2.6.32-279.14.1.el6 |
kernel-debugRed Hat:enterprise_linux:6::workstation |
before 0:2.6.32-279.14.1.el6 | 0:2.6.32-279.14.1.el6 |
kernel-debug-debuginfoRed Hat:enterprise_linux:6::workstation |
before 0:2.6.32-279.14.1.el6 | 0:2.6.32-279.14.1.el6 |
kernel-debug-develRed Hat:enterprise_linux:6::workstation |
before 0:2.6.32-279.14.1.el6 | 0:2.6.32-279.14.1.el6 |
kernel-debuginfoRed Hat:enterprise_linux:6::workstation |
before 0:2.6.32-279.14.1.el6 | 0:2.6.32-279.14.1.el6 |
kernel-debuginfo-common-i686Red Hat:enterprise_linux:6::workstation |
before 0:2.6.32-279.14.1.el6 | 0:2.6.32-279.14.1.el6 |
kernel-debuginfo-common-x86_64Red Hat:enterprise_linux:6::workstation |
before 0:2.6.32-279.14.1.el6 | 0:2.6.32-279.14.1.el6 |
kernel-develRed Hat:enterprise_linux:6::workstation |
before 0:2.6.32-279.14.1.el6 | 0:2.6.32-279.14.1.el6 |
kernel-docRed Hat:enterprise_linux:6::workstation |
before 0:2.6.32-279.14.1.el6 | 0:2.6.32-279.14.1.el6 |
kernel-firmwareRed Hat:enterprise_linux:6::workstation |
before 0:2.6.32-279.14.1.el6 | 0:2.6.32-279.14.1.el6 |
kernel-headersRed Hat:enterprise_linux:6::workstation |
before 0:2.6.32-279.14.1.el6 | 0:2.6.32-279.14.1.el6 |
perfRed Hat:enterprise_linux:6::workstation |
before 0:2.6.32-279.14.1.el6 | 0:2.6.32-279.14.1.el6 |
perf-debuginfoRed Hat:enterprise_linux:6::workstation |
before 0:2.6.32-279.14.1.el6 | 0:2.6.32-279.14.1.el6 |
python-perf-debuginfoRed Hat:enterprise_linux:6::workstation |
before 0:2.6.32-279.14.1.el6 | 0:2.6.32-279.14.1.el6 |
python-perfRed Hat:enterprise_linux:6::workstation |
before 0:2.6.32-279.14.1.el6 | 0:2.6.32-279.14.1.el6 |
kernelRed Hat:enterprise_linux:5::server |
before 0:2.6.18-348.1.1.el5 | 0:2.6.18-348.1.1.el5 |
kernel-PAERed Hat:enterprise_linux:5::server |
before 0:2.6.18-348.1.1.el5 | 0:2.6.18-348.1.1.el5 |
kernel-PAE-debuginfoRed Hat:enterprise_linux:5::server |
before 0:2.6.18-348.1.1.el5 | 0:2.6.18-348.1.1.el5 |
kernel-PAE-develRed Hat:enterprise_linux:5::server |
before 0:2.6.18-348.1.1.el5 | 0:2.6.18-348.1.1.el5 |
kernel-debugRed Hat:enterprise_linux:5::server |
before 0:2.6.18-348.1.1.el5 | 0:2.6.18-348.1.1.el5 |
kernel-debug-debuginfoRed Hat:enterprise_linux:5::server |
before 0:2.6.18-348.1.1.el5 | 0:2.6.18-348.1.1.el5 |
kernel-debug-develRed Hat:enterprise_linux:5::server |
before 0:2.6.18-348.1.1.el5 | 0:2.6.18-348.1.1.el5 |
kernel-debuginfoRed Hat:enterprise_linux:5::server |
before 0:2.6.18-348.1.1.el5 | 0:2.6.18-348.1.1.el5 |
kernel-debuginfo-commonRed Hat:enterprise_linux:5::server |
before 0:2.6.18-348.1.1.el5 | 0:2.6.18-348.1.1.el5 |
kernel-develRed Hat:enterprise_linux:5::server |
before 0:2.6.18-348.1.1.el5 | 0:2.6.18-348.1.1.el5 |
kernel-docRed Hat:enterprise_linux:5::server |
before 0:2.6.18-348.1.1.el5 | 0:2.6.18-348.1.1.el5 |
kernel-headersRed Hat:enterprise_linux:5::server |
before 0:2.6.18-348.1.1.el5 | 0:2.6.18-348.1.1.el5 |
kernel-kdumpRed Hat:enterprise_linux:5::server |
before 0:2.6.18-348.1.1.el5 | 0:2.6.18-348.1.1.el5 |
kernel-kdump-debuginfoRed Hat:enterprise_linux:5::server |
before 0:2.6.18-348.1.1.el5 | 0:2.6.18-348.1.1.el5 |
kernel-kdump-develRed Hat:enterprise_linux:5::server |
before 0:2.6.18-348.1.1.el5 | 0:2.6.18-348.1.1.el5 |
kernel-xenRed Hat:enterprise_linux:5::server |
before 0:2.6.18-348.1.1.el5 | 0:2.6.18-348.1.1.el5 |
kernel-xen-debuginfoRed Hat:enterprise_linux:5::server |
before 0:2.6.18-348.1.1.el5 | 0:2.6.18-348.1.1.el5 |
kernel-xen-develRed Hat:enterprise_linux:5::server |
before 0:2.6.18-348.1.1.el5 | 0:2.6.18-348.1.1.el5 |
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2012-1568 is a low vulnerability (CVSS 1.9) in Fedoraproject Fedora, published March 1, 2013. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.36%, the 29th percentile. Fixed in kernel 0:2.6.32-279.14.1.el6.
References
scarybeastsecurity.blogspot.com/2012/03/some-random-observations-on-linux-aslr.html
oss.oracle.com/git?p=redpatch.git%3Ba=commit%3Bh=302a4fc15aebf202b6dffd6c804377c6058ee6e4
openwall.com/lists/oss-security/2012/03/20/4
openwall.com/lists/oss-security/2012/03/21/3
bugzilla.redhat.com/show_bug.cgi?id=804947
nvd.nist.gov/vuln/detail/CVE-2012-1568
Show 32 moreShow less
oss.oracle.com/git?p=redpatch.git;a=commit;h=302a4fc15aebf202b6dffd6c804377c6058ee6e4
github.com/advisories/GHSA-vp43-m2w7-p2vc
access.redhat.com/errata/RHSA-2012:1426
access.redhat.com/security/updates/classification
access.redhat.com/knowledge/docs/en-US/Red_Hat_Enterprise_Linux/6/html/6.3_Technical_Notes/kernel.html
bugzilla.redhat.com/show_bug.cgi?id=817430
bugzilla.redhat.com/show_bug.cgi?id=843139
bugzilla.redhat.com/show_bug.cgi?id=849734
bugzilla.redhat.com/show_bug.cgi?id=860787
security.access.redhat.com/data/csaf/v2/advisories/2012/rhsa-2012_1426.json
access.redhat.com/security/cve/CVE-2012-1568
cve.org/CVERecord?id=CVE-2012-1568
access.redhat.com/security/cve/CVE-2012-2133
cve.org/CVERecord?id=CVE-2012-2133
nvd.nist.gov/vuln/detail/CVE-2012-2133
access.redhat.com/security/cve/CVE-2012-3400
cve.org/CVERecord?id=CVE-2012-3400
nvd.nist.gov/vuln/detail/CVE-2012-3400
access.redhat.com/security/cve/CVE-2012-3511
cve.org/CVERecord?id=CVE-2012-3511
nvd.nist.gov/vuln/detail/CVE-2012-3511
access.redhat.com/errata/RHSA-2013:0168
access.redhat.com/knowledge/docs/en-US/Red_Hat_Enterprise_Linux/5/html/5.9_Technical_Notes/kernel.html
bugzilla.redhat.com/show_bug.cgi?id=874835
bugzilla.redhat.com/show_bug.cgi?id=877397
security.access.redhat.com/data/csaf/v2/advisories/2013/rhsa-2013_0168.json
access.redhat.com/security/cve/CVE-2012-4444
cve.org/CVERecord?id=CVE-2012-4444
nvd.nist.gov/vuln/detail/CVE-2012-4444
access.redhat.com/security/cve/CVE-2012-5515
cve.org/CVERecord?id=CVE-2012-5515
nvd.nist.gov/vuln/detail/CVE-2012-5515