Oracle dlls are not using Address Space Layout Randomization (ASLR) (Doc ID 1969761.1)

Last updated on OCTOBER 18, 2016

Applies to:

Oracle Database - Enterprise Edition - Version 11.1.0.7 to 11.2.0.4 [Release 11.1 to 11.2]
Microsoft Windows x64 (64-bit)

Symptoms

You may be alerted by security scan software about the following or similar:

The application utilizes Oracle DLLs which do not utilize Address Space Layout Randomization protections. This can make an attackers life easier by utilizing Operation Codes located within these DLLs.

DLLs = oci.dll and oraociei11.dll
 

Cause

Sign In with your My Oracle Support account

Don't have a My Oracle Support account? Click to get started

My Oracle Support provides customers with access to over a
Million Knowledge Articles and hundreds of Community platforms