STIGQter: STIG Summary: General Purpose Operating System SRG Version: 1 Release: 6 Benchmark Date: 26 Jul 2019:

The operating system must implement address space layout randomization to protect its memory from unauthorized code execution.

DISA Rule

SV-70983r1_rule

Vulnerability Number

V-56723

Group Title

SRG-OS-000433-GPOS-00193

Rule Version

SRG-OS-000433-GPOS-00193

Severity

CAT II

CCI(s)

• CCI-002824 - The information system implements organization-defined security safeguards to protect its memory from unauthorized code execution.

Weight

10

Fix Recommendation

Configure the operating system to implement address space layout randomization to protect its memory from unauthorized code execution.

Check Contents

Verify the operating system implements address space layout randomization to protect its memory from unauthorized code execution. If it does not, this is a finding.

Vulnerability Number

V-56723

Documentable

False

Rule Version

SRG-OS-000433-GPOS-00193

Severity Override Guidance

Verify the operating system implements address space layout randomization to protect its memory from unauthorized code execution. If it does not, this is a finding.

Check Content Reference

M

Target Key

2739

Comments