CVE catalog

CVE-2005-3120

lynx: CVE-2005-3120

[CVE catalog]

Severity
Critical
Published
Source
[NVD] · [CVE record]
EPSS
23.26% · Oct 25, 2026

Stack-based buffer overflow in the HTrjis function in Lynx 2.8.6 and earlier allows remote NNTP servers to execute arbitrary code via certain article headers containing Asian characters that cause Lynx to add extra escape (ESC) characters.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Debianlynxsid2.9.3-2fixed
Debianlynxforky2.9.3-2fixed
Debianlynxtrixie2.9.2-1fixed
Debianlynxbookworm2.9.0dev.12-1fixed

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
Debianlynxsourcesid2.8.5-2sarge1highNot reported[335033]
Debianlynxsourceforky2.8.5-2sarge1highNot reported[335033]
Debianlynxsourcetrixie2.8.5-2sarge1highNot reported[335033]
Debianlynxsourcebookworm2.8.5-2sarge1highNot reported[335033]

[Debian bug #335033]

OpenFactory catalog packages

[Debian 12 (Bookworm)]

  • [lynx]Fixed
    Details (2)

    • 2.9.0dev.12-1 · amd64 · bookworm

      Fixed · Fixed: 2.8.5-2sarge1

      dsa · lynx · debian · bookworm; dsa · lynx · debian · 12

    • 2.9.0dev.12-1 · arm64 · bookworm

      Fixed · Fixed: 2.8.5-2sarge1

      dsa · lynx · debian · bookworm; dsa · lynx · debian · 12

  • [lynx-common]Fixed

    Source package: [lynx]

    Details (2)

    • 2.9.0dev.12-1 · all · bookworm

      Fixed · Fixed: 2.8.5-2sarge1

      dsa · lynx · debian · bookworm; dsa · lynx · debian · 12

    • 2.9.0dev.12-1 · all · bookworm

      Fixed · Fixed: 2.8.5-2sarge1

      dsa · lynx · debian · bookworm; dsa · lynx · debian · 12

[Debian 13 (Trixie)]

  • [lynx]Fixed

    Source package: [lynx]

    Details (2)

    • 2.9.2-1 · amd64 · trixie

      Fixed · Fixed: 2.8.5-2sarge1

      dsa · lynx · debian · 13

    • 2.9.2-1+b1 · arm64 · trixie

      Fixed · Fixed: 2.8.5-2sarge1

      dsa · lynx · debian · 13

  • [lynx-common]Fixed

    Source package: [lynx]

    Details (2)

    • 2.9.2-1 · all · trixie

      Fixed · Fixed: 2.8.5-2sarge1

      dsa · lynx · debian · 13

    • 2.9.2-1 · all · trixie

      Fixed · Fixed: 2.8.5-2sarge1

      dsa · lynx · debian · 13

Observed:

References

[Debian Security Tracker] · [FIRST EPSS] · [OSV Package Vulnerability Database] · [Red Hat security advisories and VEX]