Skip to content
OpenAdvisories
High · 8.4 CVE-2016-20042 EUVD-2016-10839

TRN 3.6-23 Stack Buffer Overflow Local Code Execution

Published Mar 28, 2026 · Updated Mar 30, 2026 · Assigned by VulnCheck

Description

TRN 3.6-23 contains a stack buffer overflow vulnerability that allows local attackers to execute arbitrary code by supplying an oversized argument to the application. Attackers can craft a malicious command-line argument with 156 bytes of padding followed by a return address to overwrite the instruction pointer and execute shellcode with user privileges.

Affected products

VendorProductAffectedFixed
trn Threaded USENET News Reader 3.6-23 —

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

ReleasePackageFixed inAdvisory
Ubuntu 16.04 LTS trn No fix yet —

References