PT-2007-1726 · Grsecurity · Grsecurity Patch

Published 2007-01-16 · Updated 2024-08-07 · CVE-2007-0253

Positive Technologies (AI Summary)

CVSS v2.0

7.2

High

Base vector

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions grsecurity patch (affected versions not specified)

Description The issue concerns an unspecified vulnerability in the grsecurity patch, which is reported to have remote attack vectors. However, the grsecurity developer has disputed this issue, stating that the function in question is trivial and has been checked for vulnerabilities. The developer also references a past disclosure that was not proven.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2007-0253

Affected Products

Grsecurity Patch

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2007-0253 · Security Note
• http://forums.grsecurity.net/viewtopic.php?t=1646 · Vendor Advisory
• http://digitalarmaments.com/news_news.shtml · Vendor Advisory
• http://grsecurity.net/news.php#digitalfud · Note