Sifchain · Report #1188633
Linux Desktop application "sifnoded" executable does not use Pie / no ASLR
Informativestatus
1upvotes
9 Dec 2021disclosed
How it was found
Hello Sifchain, sifnoded binary from the Linux application is no position independent executable PoC; **$file sifnoded Output will be like ; ███████
Position independent executables are required for full ASLR support on Linux. Non-pie-binaries are loaded to a fixed location, thus allowing ROP attacks. Reference for this report; #415272 Thanks.
Impact
A simple memory corruption bug like a buffer overflow can easily lead to a remote code execution bug. With ASLR these bugs are much harder and sometimes impossible to exploit.
LSB executable should be "LSB shared object" or "LSB pie executable"