CVE-2023-0687: A vulnerability was found in GNU C Library 2.38.

Versions reported by the vendor

Affected version ranges reported by the assigning authority (VulDB). Independent of NVD's CPE analysis and usually ahead of it.

• GNU C Library

  • 2.38affected

Affected versions

NVD version ranges (for catalog products). Add the product to your stack with a version and matching uses these.

• gnu glibcbefore 2.38

Package-level exposure

OSV and GitHub Advisory data: ecosystem, package and range. SBOM matching uses this table.

Other highest-scoring records for the same primary product.

• CVE-2023-4911Glibc: buffer overflow in ld.so leading to privilege escalationKEV
  80Now
• CVE-2015-0235Heap-based buffer overflow in the __nss_hostname_digits_dots function in glibc 2.2, and other 2.x versions before 2.18, allows…
  68This week
• CVE-2015-7547Multiple stack-based buffer overflows in the (1) send_dg and (2) send_vc functions in the libresolv library in the GNU C Library (aka glibc…
  60This week

Published before and after this one in the same product

• ← EarlierCVE-2022-39046Aug 31, 2022 · An issue was discovered in the GNU C Library (glibc) 2.36.
  22Monitor
• ← EarlierCVE-2023-25139Feb 3, 2023 · sprintf in the GNU C Library (glibc) 2.37 has a buffer overflow (out-of-bounds write) in some situations with a correct buffer size.
  39Monitor
• Later →CVE-2015-20109Jun 25, 2023 · end_pattern (called from internal_fnmatch) in the GNU C Library (aka glibc or libc6) before 2.22 might allow context-dependent attackers to…
  22Monitor

Root cause

When data is copied, the source length is not compared with the size of the destination buffer. Excess data overwrites adjacent memory.

A representative example of this vulnerability class. Not the vendor's source code; it shows the faulty pattern and its fix.

1char buf[256];2memcpy(buf, pkt->data, pkt->len);

1char buf[256];2if (pkt->len > sizeof(buf)) {3  return -EINVAL;4}5memcpy(buf, pkt->data, pkt->len);

Attack context

MITRE CAPEC attack patterns and ATT&CK techniques for this weakness class (CWE). A starting point for detection rules and threat hunting.