CVE-2023-0687

A vulnerability was found in GNU C Library 2.38. It has been declared as critical. This vulnerability affects the function __monstartup of the file gmon.c of the component Call Graph Monitor. The manipulation leads to buffer overflow. It is recommended to apply a patch to fix this issue. VDB-220246 is the identifier assigned to this vulnerability. NOTE: The real existence of this vulnerability is still doubted at the moment. The inputs that induce this vulnerability are basically addresses of the running application that is built with gmon enabled. It's basically trusted input or input that needs an actual security flaw to be compromised or controlled.

• CWE-120

• https://patchwork.sourceware.org/project/glibc/patch/20230204114138.5436-1-leo%40yuriev.ru/Patch
• https://sourceware.org/bugzilla/show_bug.cgi?id=29444Issue Tracking, Patch, Third Party Advisory
• https://vuldb.com/?ctiid.220246Permissions Required, Third Party Advisory
• https://vuldb.com/?id.220246Permissions Required, Third Party Advisory
• https://patchwork.sourceware.org/project/glibc/patch/20230204114138.5436-1-leo%40yuriev.ru/Patch
• https://sourceware.org/bugzilla/show_bug.cgi?id=29444Issue Tracking, Patch, Third Party Advisory
• https://vuldb.com/?ctiid.220246Permissions Required, Third Party Advisory
• https://vuldb.com/?id.220246Permissions Required, Third Party Advisory

Published

Feb 6, 2023

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-0680Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2023-0681Rapid7 InsightVM versions 6.6.178 and lower suffers from an …6.1
• CVE-2023-0683A valid, authenticated XCC user with read only access may ga…8.8
• CVE-2023-0684The Wicked Folders plugin for WordPress is vulnerable to aut…4.3
• CVE-2023-0685The Wicked Folders plugin for WordPress is vulnerable to Cro…4.3
• CVE-2023-0686A vulnerability was found in SourceCodester Online Eyewear S…9.8
• CVE-2023-0688The Metform Elementor Contact Form Builder for WordPress is …6.5
• CVE-2023-0689The Metform Elementor Contact Form Builder for WordPress is …4.3
• CVE-2023-0690HashiCorp Boundary from 0.10.0 through 0.11.2 contain an iss…7.1
• CVE-2023-0691The Metform Elementor Contact Form Builder for WordPress is …4.3
• CVE-2023-0692The Metform Elementor Contact Form Builder for WordPress is …4.3
• CVE-2023-0693The Metform Elementor Contact Form Builder for WordPress is …4.3