Description
TRN 3.6-23 contains a stack buffer overflow vulnerability that allows local attackers to execute arbitrary code by supplying an oversized argument to the application. Attackers can craft a malicious command-line argument with 156 bytes of padding followed by a return address to overwrite the instruction pointer and execute shellcode with user privileges.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| trn | Threaded USENET News Reader | 3.6-23 | — |
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Ubuntu
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu 16.04 LTS | trn | No fix yet | — |
References
- ExploitDB-39764 exploit
- Official Product Homepage product
- VulnCheck Advisory: TRN 3.6-23 Stack Buffer Overflow Local Code Execution third-party-advisory