CVE-2005-3120: debian debian_linux Incorrect Calculation of Buffer Size

Modified

AliasesRHSA-2005:803DEBIAN-CVE-2005-3120DSA-1085-1+2 more

Published 17-10-2005Last modified 07-08-2024

Some data may be incomplete

2 references with an unsupported link type were hidden.

Vulnerability summary

CVE-2005-3120 is a critical (CVSS 9.8) Incorrect Calculation of Buffer Size vulnerability in debian debian_linux. EPSS estimates a 23.26% chance of exploitation in the next 30 days, higher than 97.7% of scored vulnerabilities. 1 public exploit is recorded.

Priority

Prioritisepublic exploit

Public exploit (exploit-database, 17-10-2005)

Source freshness unavailable

How is this decided?

CVSS score

9.8/10

010

Critical · v3.1 (NVD)

EPSS score

23.26%

0%100%

High · 0.00 pp in 30 days

KEVNot listedNot listed by any tracked catalog.

RansomwareNot flaggedNo ransomware use recorded.

Public exploits1exploit-database

Timeline

17-10-2005
PublishedVulnerability first disclosed.
07-08-2024
Last modifiedVulnerability information updated.

Description

Stack-based buffer overflow in the HTrjis function in Lynx 2.8.6 and earlier allows remote NNTP servers to execute arbitrary code via certain article headers containing Asian characters that cause Lynx to add extra escape (ESC) characters.

CVSS metrics

3 scores · 2 sources · 2 versions

v3.19.8v2.07.5

EPSS trend

Probability

23.26%

Chance of exploitation in the next 30 days

Percentile

98%

Versus all other CVEs

30-day change

No change 0.00 pp

From 23.26% on 04-10-2026

04-10-202603-11-2026

Known exploited

Compare KEV catalogs

CISA KEV

Not in the CISA KEV catalog.

ENISA CNW

Not in the ENISA CNW catalog.

CIRCL

Not in the CIRCL catalog.

Public exploits

1 found

exploit-databasedosmultipleVerified
Lynx 2.8.6dev.13 - Remote Buffer Overflow (PoC)
Maturity: poc

Weaknesses

CWE · root cause

CWE-131Incorrect Calculation of Buffer SizeThe product does not correctly calculate the size to be used when allocating a buffer.

Affected systems

Version check

Known conditions: network-reachable, no authentication, no user interaction (CVSS vector). Other conditions: not stated in public data.

Debian3 products

lynx< 2.8.4.1b-3.3 | < 2.8.5-2sarge1 | < 2.8.4.1b-3.2
lynx-cur< 2.8.5-2.5woody1 | < 2.8.6-9sarge1
debian_linuxEOL3.0 | 3.1

Redhat2 products

lynx< 0:2.8.5-11.1 | < 0:2.8.5-18.1
lynx-debuginfo< 0:2.8.5-11.1 | < 0:2.8.5-18.1

Invisible-island1 product

lynx≤ 2.8.6

3 vendors · 6 products

References

41 links

securitytracker.com/id?1015065VDB EntryX Refsource SECTRACKBroken LinkThird Party Advisory
secunia.com/advisories/18376Third Party AdvisoryX Refsource SECUNIABroken Link
secunia.com/advisories/17216Third Party AdvisoryX Refsource SECUNIABroken Link
secunia.com/advisories/17480Third Party AdvisoryX Refsource SECUNIABroken Link
lists.trustix.org/pipermail/tsl-announce/2005-October/000354.htmlVendor AdvisoryX Refsource TRUSTIXBroken Link
slackware.com/security/viewer.php?l=slackware-security&y=2005&m=slackware-security.423056Vendor AdvisoryX Refsource SLACKWAREBroken Link
www.openpkg.org/security/OpenPKG-SA-2005.026-lynx.htmlVendor AdvisoryX Refsource OPENPKGBroken Link
lists.grok.org.uk/pipermail/full-disclosure/2005-October/038019.htmlMailing ListX Refsource FULLDISCBroken LinkPatchVendor Advisory
www.securityfocus.com/archive/1/435689/30/4740/threadedMailing ListX Refsource BUGTRAQBroken LinkThird Party AdvisoryVDB Entry
secunia.com/advisories/17444Third Party AdvisoryX Refsource SECUNIABroken Link

Show all 41 references

www.debian.org/security/2006/dsa-1085Vendor AdvisoryX Refsource DEBIANMailing ListThird Party Advisory
www.gentoo.org/security/en/glsa/glsa-200510-15.xmlVendor AdvisoryX Refsource GENTOOThird Party Advisory
secunia.com/advisories/18584Third Party AdvisoryX Refsource SECUNIABroken Link
secunia.com/advisories/17238Third Party AdvisoryX Refsource SECUNIABroken Link
www.novell.com/linux/security/advisories/2005_25_sr.htmlVendor AdvisoryX Refsource SUSEBroken Link
secunia.com/advisories/17150Third Party AdvisoryX Refsource SECUNIABroken Link
www.mandriva.com/security/advisories?name=MDKSA-2005:186Vendor AdvisoryX Refsource MANDRIVAThird Party Advisory
secunia.com/advisories/17248Third Party AdvisoryX Refsource SECUNIABroken Link
bugzilla.redhat.com/bugzilla/show_bug.cgi?id=170253X Refsource MISCIssue Tracking
support.avaya.com/elmodocs2/security/ASA-2006-010.htmX Refsource CONFIRMThird Party Advisory
www.securityfocus.com/archive/1/419763/100/0/threadedVendor AdvisoryX Refsource FEDORABroken LinkThird Party AdvisoryVDB Entry
secunia.com/advisories/17360Third Party AdvisoryX Refsource SECUNIABroken Link
secunia.com/advisories/17445Third Party AdvisoryX Refsource SECUNIABroken Link
www.securityfocus.com/bid/15117VDB EntryX Refsource BIDBroken LinkThird Party Advisory
usn.ubuntu.com/206-1/Vendor AdvisoryX Refsource UBUNTUBroken Link
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9257VDB EntrySignatureX Refsource OVALBroken Link
www.redhat.com/support/errata/RHSA-2005-803.htmlVendor AdvisoryX Refsource REDHATBroken Link
secunia.com/advisories/17231Third Party AdvisoryX Refsource SECUNIABroken Link
secunia.com/advisories/17230Third Party AdvisoryX Refsource SECUNIABroken Link
secunia.com/advisories/17340Third Party AdvisoryX Refsource SECUNIABroken Link
secunia.com/advisories/20383Third Party AdvisoryX Refsource SECUNIABroken Link
www.debian.org/security/2005/dsa-874Vendor AdvisoryX Refsource DEBIANMailing ListThird Party Advisory
www.debian.org/security/2005/dsa-876Vendor AdvisoryX Refsource DEBIANMailing ListThird Party Advisory
access.redhat.com/errata/RHSA-2005:803Advisory
access.redhat.com/security/updates/classification/ARTICLE
bugzilla.redhat.com/show_bug.cgi?id=170253REPORT
security.access.redhat.com/data/csaf/v2/advisories/2005/rhsa-2005_803.jsonAdvisory
access.redhat.com/security/cve/CVE-2005-3120REPORT
www.cve.org/CVERecord?id=CVE-2005-3120Advisory
nvd.nist.gov/vuln/detail/CVE-2005-3120Advisory
security-tracker.debian.org/tracker/CVE-2005-3120Advisory