CME-101
ASLR (Address Space Layout Randomization)
Description
Randomizes memory layout of processes, making memory corruption exploits significantly harder by requiring the attacker to guess or leak addresses.
CVSS Vector Impacts
| Metric | Transition | Rationale |
|---|---|---|
| Attack Complexity (AC) | L → H | Attacker must defeat randomization via info leak or brute force |
CWE Relationships
Verification
Check kernel randomize_va_space sysctl is set to 2 (full randomization)
$ cat /proc/sys/kernel/randomize_va_space
# Expected: 2
# Expected: 2
Platform: linux
$ sysctl kernel.randomize_va_space
# Expected: kernel.randomize_va_space = 2
# Expected: kernel.randomize_va_space = 2
Platform: linux