[bashook]

Is ASLR a capable solution to those weaknesses? ASLR is supported by the operating system. Though a system administrator would have to turn it on by following these instructions: https://www.ibm.com/support/knowledgecenter/SSLTBW_2.4.0/com...

[monocasa]

ASLR is a stopgap that's difficult to consistently apply to a legacy system, since there's so many ways to accidentally leak address information.