Title

The system must use available memory address randomization techniques. (Cat III impact)

Discussion

Successful exploitation of buffer overflow vulnerabilities relies in some measure to having a predictable address structure of the executing program. Address randomization techniques reduce the probability of a successful exploit.

Check Content

This check is not applicable (NA) for HPUX.

Fix Text

This check/fix is not applicable (NA) for HPUX.

Additional Identifiers

Rule ID: SV-38399r1_rule

Vulnerability ID: V-22576

Group Title: GEN008420

Expert Comments

CCIs tied to check.

Controls tied to check. These are derived from the CCIs shown above.