ZeroDay Findings
Sign inSign up

Findings

CVE-2023-0687

A vulnerability was found in GNU C Library 2.38.

Published Feb 6, 2023 · updated Oct 14, 2026 · gnu glibc

A vulnerability was found in GNU C Library 2.38. It has been declared as critical. This vulnerability affects the function __monstartup of the file gmon.c of the component Call Graph Monitor. The manipulation leads to buffer overflow. It is recommended to apply a patch to fix this issue. VDB-220246 is the identifier assigned to this vulnerability. NOTE: The real existence of this vulnerability is still doubted at the moment. The inputs that induce this vulnerability are basically addresses of the running application that is built with gmon enabled. It's basically trusted input or input that needs an actual security flaw to be compromised or controlled.

Code

The project this record applies to. Exploit listings stay in References.

No public source repository is identified for this product.

Timeline

Detection, updates, and resolution for this record.

  1. Feb 6, 2023 · NIST NVD

    Detected

    A vulnerability was found in GNU C Library 2.38. It has been declared as critical. This vulnerability affects the function __monstartup of the file gmon.c of the component Call Graph Monitor. The manipulation leads to buffer overflow. It is recommended to apply a patch to fix this issue. VDB-220246 is the identifier assigned to this vulnerability. NOTE: The real existence of this vulnerability is

  2. Oct 14, 2026 · NIST NVD

    Updated

    A vulnerability was found in GNU C Library 2.38. It has been declared as critical. This vulnerability affects the function __monstartup of the file gmon.c of the component Call Graph Monitor. The manipulation leads to buffer overflow. It is recommended to apply a patch to fix this issue. VDB-220246 is the identifier assigned to this vulnerability. NOTE: The real existence of this vulnerability is

Affected

  • cpe gnu/glibcversion unspecified

Sources

  • CVE.orgVulnerability recordCVE-2023-0687

    Official CVE identifier

    cve.org
  • FIRST EPSSExploitation probabilityCVE-2023-0687

    30-day exploitation probability 1.1%

    first.org
  • NIST NVDVulnerability recordCVE-2023-0687

    A vulnerability was found in GNU C Library 2.38. It has been declared as critical. This vulnerability affects the function __monstartup of the file gmon.c of the component Call Graph Monitor. The manipulation leads to buffer overflow. It is recommended to apply a patch to fix thi

    nvd.nist.gov

References