Enable Randomized Virtual Memory Region Placement (Scored)
Set the system flag to force randomized virtual memory region placement.
[don't_use_ASLR/randomize base address for mmap'd areas/ditto, and also randomize the brk base address]
Randomly placing virtual memory regions will make it difficult to write memory page exploits as the memory placement will be consistently shifting.
Fix:
Add the following line to the /etc/sysctl.conf file.
kernel.randomize_va_space = 2
oval:org.secpod.oval:def:33854
SCAP Repo OVAL Definition
2016-04-19