A vulnerability was found in GNU C Library 2.38. It has been declared as critical. This vulnerability affects the function __monstartup of the file gmon.c of the component Call Graph Monitor. The man…
Medium CVSS 4.6
Summary
A vulnerability was found in GNU C Library 2.38. It has been declared as critical. This vulnerability affects the function __monstartup of the file gmon.c of the component Call Graph Monitor. The manipulation leads to buffer overflow. It is recommended to apply a patch to fix this issue. VDB-220246 is the identifier assigned to this vulnerability. NOTE: The real existence of this vulnerability is still doubted at the moment. The inputs that induce this vulnerability are basically addresses of t…
In-depth triage
No in-depth report has been generated yet (DR-003 v2 AI pipeline is under construction).
Affected products
- :
Sources
- NVD DATABASE
Original Links
- https://patchwork.sourceware.org/project/glibc/patch/20230204114138.5436-1-leo%40yuriev.ru/ Patch
- https://sourceware.org/bugzilla/show_bug.cgi?id=29444 Issue Tracking
- https://vuldb.com/?ctiid.220246 Permissions Required
- https://vuldb.com/?id.220246 Permissions Required
- https://patchwork.sourceware.org/project/glibc/patch/20230204114138.5436-1-leo%40yuriev.ru/ Patch
- https://sourceware.org/bugzilla/show_bug.cgi?id=29444 Issue Tracking
- https://vuldb.com/?ctiid.220246 Permissions Required
- https://vuldb.com/?id.220246 Permissions Required
- https://cert-portal.siemens.com/productcert/html/ssa-398330.html
Timeline
- nvd_ingest NVD