A vulnerability was found in GNU C Library 2.38. This vulnerability affects the function __monstartup of the file gmon.c of the component Call Graph Monitor. The manipulation leads to buffer overflow. It is recommended to apply a patch to fix this issue. VDB-220246 is the identifier assigned to this vulnerability. https://vuldb.com/?ctiid.220246 https://sourceware.org/bugzilla/show_bug.cgi?id=29444 https://patchwork.sourceware.org/project/glibc/patch/20230204114138.5436-1-leo@yuriev.ru/ https://vuldb.com/?id.220246
Created glibc tracking bugs for this issue: Affects: fedora-36 [bug 2167611] Affects: fedora-37 [bug 2167613] Created zig tracking bugs for this issue: Affects: fedora-36 [bug 2167612]
FYI, this has been rejected as a CVE by upstream: https://sourceware.org/bugzilla/show_bug.cgi?id=29444#c9 https://sourceware.org/bugzilla/show_bug.cgi?id=29444#c11