grsecurity grsecurity kernel patch vulnerabilities and exploits

(subscribe to this query)

Unspecified vulnerability in the expand_stack function in grsecurity PaX allows local users to gain privileges via unspecified vectors. NOTE: the grsecurity developer has disputed this issue, stating that "the function they claim the vulnerability to be in is a trivial funct...

Grsecurity Grsecurity Kernel Patch 2.0.1 Grsecurity Grsecurity Kernel Patch 2.1.5 Grsecurity Grsecurity Kernel Patch 2.1.1 Grsecurity Grsecurity Kernel Patch 2.1.7 Grsecurity Grsecurity Kernel Patch 2.1.8 Grsecurity Grsecurity Kernel Patch 2.1.2 Grsecurity Grsecurity Kernel Patch 1.9.4 Grsecurity Grsecurity Kernel Patch 2.1.4 Grsecurity Grsecurity Kernel Patch 2.1.3 Grsecurity Grsecurity Kernel Patch 2.1.0 Grsecurity Grsecurity Kernel Patch 2.0.2 Grsecurity Grsecurity Kernel Patch 2.1.6

1 EDB exploit

The RBAC functionality in grsecurity prior to 2.1.8 does not properly handle when the admin role creates a service and then exits the shell without unauthenticating, which causes the service to be restarted with the admin role still active.

Grsecurity Grsecurity Kernel Patch 2.1.1 Grsecurity Grsecurity Kernel Patch 2.1.2 Grsecurity Grsecurity Kernel Patch 2.0.1 Grsecurity Grsecurity Kernel Patch 2.0.2 Grsecurity Grsecurity Kernel Patch 2.1.0 Grsecurity Grsecurity Kernel Patch 2.1.7 Grsecurity Grsecurity Kernel Patch 2.1.3 Grsecurity Grsecurity Kernel Patch 2.1.4 Grsecurity Grsecurity Kernel Patch 2.1.5 Grsecurity Grsecurity Kernel Patch 2.1.6

The RBAC functionality in grsecurity prior to 2.1.11-2.6.24.5 and 2.1.11-2.4.36.2 does not enforce user_transition_deny and user_transition_allow rules for the (1) sys_setfsuid and (2) sys_setfsgid calls, which allows local users to bypass restrictions for those calls.

Grsecurity Grsecurity Kernel Patch 2.6.24.4 Grsecurity Grsecurity Kernel Patch 2.4.33 Grsecurity Grsecurity Kernel Patch 2.4.33.2 Grsecurity Grsecurity Kernel Patch 2.4.33.3 Grsecurity Grsecurity Kernel Patch 2.4.33.4 Grsecurity Grsecurity Kernel Patch 2.4.34 Grsecurity Grsecurity Kernel Patch 2.6.18

Unspecified vulnerability in the grsecurity patch has unspecified impact and remote attack vectors, a different vulnerability than the expand_stack vulnerability from the Digital Armaments 20070110 pre-advisory. NOTE: the grsecurity developer has disputed this issue, stating that...

Grsecurity Grsecurity Kernel Patch

grsecurity 1.9.4 for Linux kernel 2.4.18 allows local users to bypass read-only permissions by using mmap to directly map /dev/mem or /dev/kmem to kernel memory.

Grsecurity Grsecurity Kernel Patch 1.9.4

1 EDB exploit

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook