CVE-2007-0257 - CVE House
Back to Database
Status published Unknown CVE-2007-0257

Unspecified vulnerability in the expand_stack function in grsecurity PaX allows...

Vulnerability Description

Unspecified vulnerability in the expand_stack function in grsecurity PaX allows local users to gain privileges via unspecified vectors. NOTE: the grsecurity developer has disputed this issue, stating that "the function they claim the vulnerability to be in is a trivial function, which can, and has been, easily checked for any supposed vulnerabilities." The developer also cites a past disclosure that was not proven. As of 20070120, the original researcher has released demonstration code

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2007-0257

Credits & Attribution

No credits recorded in the NVD database.

References

More from grsecurity

View All →
CVE-2010-3373
paxtest handles temporary files insecurely...
Medium 5.5
CVE-2008-1940
The RBAC functionality in grsecurity before 2.1.11-2.6.24.5 and 2.1.11-2.4.36.2 does...
Medium 4.6
CVE-2007-0253
Unspecified vulnerability in the grsecurity patch has unspecified impact and...
High 7.2
CVE-2006-0228
The RBAC functionality in grsecurity before 2.1.8 does not properly...
High 7.2
CVE-2002-1826
grsecurity 1.9.4 for Linux kernel 2.4.18 allows local users to...
Medium 4.6

Affected Vendor

Affected Software

grsecurity kernel patch
Vulnerable Versions:
1.9.4, 2.0.1, 2.0.2, 2.1.0, 2.1.1, 2.1.2, 2.1.3, 2.1.4, 2.1.5, 2.1.6, 2.1.7, 2.1.8

Timeline

Official Publish: January 16th, 2007
Last Modified: January 17th, 2025
Added to House: July 18th, 2026

CVSS Vectors

No vector data available

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.