Homepage

Buffer Overflow The advisory has been revoked - it doesn't affect any version of package glibc-langpack-pl  (opens in a new tab)

Threat Intelligence

EPSS
1.09% (64th percentile)

Do your applications use this vulnerable package?

In a few clicks we can analyze your entire application and see what components are vulnerable in your application, and suggest you quick fixes.

Test your applications
  • Snyk IDSNYK-RHEL9-GLIBCLANGPACKPL-3312487
  • published7 Feb 2023
  • disclosed6 Feb 2023
Report a new vulnerability Found a mistake?

Introduced: 6 Feb 2023

CVE-2023-0687  (opens in a new tab)
CWE-120  (opens in a new tab)

Amendment

The Red Hat security team deemed this advisory irrelevant for RHEL:9.

NVD Description

Note: Versions mentioned in the description apply only to the upstream glibc-langpack-pl package and not the glibc-langpack-pl package as distributed by RHEL.

A vulnerability was found in GNU C Library 2.38. It has been declared as critical. This vulnerability affects the function __monstartup of the file gmon.c of the component Call Graph Monitor. The manipulation leads to buffer overflow. It is recommended to apply a patch to fix this issue. VDB-220246 is the identifier assigned to this vulnerability. NOTE: The real existence of this vulnerability is still doubted at the moment. The inputs that induce this vulnerability are basically addresses of the running application that is built with gmon enabled. It's basically trusted input or input that needs an actual security flaw to be compromised or controlled.