A vulnerability was found in GNU C Library 2.38. It has been declared as critical. This vulnerability affects the function __monstartup of the file gmon.c of the component Call Graph Monitor. The manipulation leads to buffer overflow. It is recommended to apply a patch to fix this issue. VDB-220246 is the identifier assigned to this vulnerability. NOTE: The real existence of this vulnerability is still doubted at the moment. The inputs that induce this vulnerability are basically addresses of the running application that is built with gmon enabled. It's basically trusted input or input that needs an actual security flaw to be compromised or controlled.
| Reporter | Title | Published | Views | Family All 83 |
|---|---|---|---|---|
| Security Bulletin: IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data is vulnerable to multiple Operator package issues | 7 May 202417:05 | – | ibm | |
| Security Bulletin: Execution Engine for Apache Hadoop is vulnerable to denial of service, buffer overflow and allow a local authenticated attacker to gain elevated privileges | 15 Apr 202502:36 | – | ibm | |
| Security Bulletin: IBM Cloud Transformation Advisor is vulnerable to multiple vulnerabilities | 29 Apr 202502:35 | – | ibm | |
| CVE-2023-0687 | 6 Feb 202319:15 | – | attackerkb | |
| glibc Heap Buffer Overflow DoS | 15 Feb 202300:00 | – | bdu_fstec | |
| CVE-2023-0687 affecting package glibc 2.28-24 | 12 Jan 202509:15 | – | cbl_mariner | |
| CVE-2023-0687 affecting package glibc 2.35-10 | 12 Jan 202509:15 | – | cbl_mariner | |
| CVE-2023-0687 | 6 Feb 202322:29 | – | circl | |
| GNU C Library security vulnerabilities | 6 Feb 202300:00 | – | cnnvd | |
| CVE-2023-0687 | 6 Feb 202300:00 | – | cve |
10
Node
OR
Data
Build on a solid foundation with Vulners data
We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data
Api
Power your application with Vulners API
The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access
App
Assess and manage vulnerabilities with Vulners tools
Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation
02 Oct 2025 06:11Current
6.2Medium risk
Vulners AI Score6.2
CVSS 24
CVSS 3.14.6 - 9.8
CVSS 34.6
EPSS0.01094
SSVC