GHSA-5r4p-4pqv-gqhwCriticalCVSS 9.8
A vulnerability was found in GNU C Library 2.38. It has been declared as critical. This...
🔗 CVE IDs covered (1)
📋 Description
A vulnerability was found in GNU C Library 2.38. It has been declared as critical. This vulnerability affects the function __monstartup of the file gmon.c of the component Call Graph Monitor. The manipulation leads to buffer overflow. It is recommended to apply a patch to fix this issue. VDB-220246 is the identifier assigned to this vulnerability.
🔗 References (8)
- https://nvd.nist.gov/vuln/detail/CVE-2023-0687
- https://sourceware.org/bugzilla/show_bug.cgi?id=29444
- https://vuldb.com/?ctiid.220246
- https://vuldb.com/?id.220246
- https://patchwork.sourceware.org/project/glibc/patch/20230204114138.5436-1-leo%40yuriev.ru
- https://patchwork.sourceware.org/project/glibc/patch/[email protected]
- https://cert-portal.siemens.com/productcert/html/ssa-398330.html
- https://github.com/advisories/GHSA-5r4p-4pqv-gqhw