grsecurity records

6 published records for vendor grsecurity.

Researcher profile

Records by year

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

Attack profile

6 records

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
31Monitor	CVE-2007-0257Proof of concept	Unspecified vulnerability in the expand_stack function in grsecurity PaX allows local users to gain privileges via unspecified vectors.grsecurity · grsecurity kernel patch Local privilege escalation	High7.8	—	1.0%	Jan 16, 2007
28Monitor	CVE-2006-0228No exploit	The RBAC functionality in grsecurity before 2.1.8 does not properly handle when the admin role creates a service and then exits the shell wigrsecurity · grsecurity kernel patch	High7.2	—	0.4%	Jan 17, 2006
28Monitor	CVE-2007-0253No exploit	Unspecified vulnerability in the grsecurity patch has unspecified impact and remote attack vectors, a different vulnerability than the expangrsecurity · grsecurity kernel patch	High7.2	—	0.3%	Jan 16, 2007
22Monitor	CVE-2010-3373No exploit	paxtest handles temporary files insecurelygrsecurity · paxtest · CWE-20	Medium5.5	—	0.4%	Oct 29, 2019
18Monitor	CVE-2002-1826Proof of concept	grsecurity 1.9.4 for Linux kernel 2.4.18 allows local users to bypass read-only permissions by using mmap to directly map /dev/mem or /dev/kgrsecurity · grsecurity kernel patch	Medium4.6	—	1.0%	Dec 31, 2002
18Monitor	CVE-2008-1940No exploit	The RBAC functionality in grsecurity before 2.1.11-2.6.24.5 and 2.1.11-2.4.36.2 does not enforce user_transition_deny and user_transition_algrsecurity · grsecurity kernel patch · CWE-264	Medium4.6	—	0.3%	Apr 25, 2008

CVE-2007-0257
31Monitor
Unspecified vulnerability in the expand_stack function in grsecurity PaX allows local users to gain privileges via unspecified vectors.
HighCVSS 7.8Proof of conceptEPSS 1%
- Local privilege escalation
grsecurity · grsecurity kernel patchJan 16, 2007
CVE-2006-0228
28Monitor
The RBAC functionality in grsecurity before 2.1.8 does not properly handle when the admin role creates a service and then exits the shell wi
HighCVSS 7.2No exploitEPSS 0%
grsecurity · grsecurity kernel patchJan 17, 2006
CVE-2007-0253
28Monitor
Unspecified vulnerability in the grsecurity patch has unspecified impact and remote attack vectors, a different vulnerability than the expan
HighCVSS 7.2No exploitEPSS 0%
grsecurity · grsecurity kernel patchJan 16, 2007
CVE-2010-3373
22Monitor
paxtest handles temporary files insecurely
MediumCVSS 5.5No exploitEPSS 0%
grsecurity · paxtestOct 29, 2019
CVE-2002-1826
18Monitor
grsecurity 1.9.4 for Linux kernel 2.4.18 allows local users to bypass read-only permissions by using mmap to directly map /dev/mem or /dev/k
MediumCVSS 4.6Proof of conceptEPSS 1%
grsecurity · grsecurity kernel patchDec 31, 2002
CVE-2008-1940
18Monitor
The RBAC functionality in grsecurity before 2.1.11-2.6.24.5 and 2.1.11-2.4.36.2 does not enforce user_transition_deny and user_transition_al
MediumCVSS 4.6No exploitEPSS 0%
grsecurity · grsecurity kernel patchApr 25, 2008