A vulnerability was found in GNU C Library 2.38. It has been declared as critical. This vulnerability affects the function __monstartup of the file gmon.c of the component Call Graph Monitor. The manipulation leads to buffer overflow. It is recommended to apply a patch to fix this issue. VDB-220246 is the identifier assigned to this vulnerability. NOTE: The real existence of this vulnerability is still doubted at the moment. The inputs that induce this vulnerability are basically addresses of the running application that is built with gmon enabled. It's basically trusted input or input that needs an actual security flaw to be compromised or controlled.

🗓️ 02 Oct 2025 06:11:27Reported by MicrosoftType

GNU C Library 2.38 vulnerability in __monstartup (gmon.c) causes buffer overflow; patch advised; VDB-220246; existence doubtful.

Reporter	Title	Published	Views	Family All 84
IBM Security Bulletins	Security Bulletin: IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data is vulnerable to multiple Operator package issues	7 May 202417:05	–	ibm
IBM Security Bulletins	Security Bulletin: Execution Engine for Apache Hadoop is vulnerable to denial of service, buffer overflow and allow a local authenticated attacker to gain elevated privileges	15 Apr 202502:36	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cloud Transformation Advisor is vulnerable to multiple vulnerabilities	29 Apr 202502:35	–	ibm
ATTACKERKB	CVE-2023-0687	6 Feb 202319:15	–	attackerkb
BDU FSTEC	The vulnerability in the __monstartup function of the gmon.c file in the system calls and main functions of the GNU C library (glibc) allows a malicious actor to access confidential data.	15 Feb 202300:00	–	bdu_fstec
CBLMariner	CVE-2023-0687 affecting package glibc 2.28-24	12 Jan 202509:15	–	cbl_mariner
CBLMariner	CVE-2023-0687 affecting package glibc 2.35-10	12 Jan 202509:15	–	cbl_mariner
Circl	CVE-2023-0687	6 Feb 202322:29	–	circl
CNNVD	GNU C Library 安全漏洞	6 Feb 202300:00	–	cnnvd
CVE	CVE-2023-0687	6 Feb 202300:00	–	cve