GLSA 200510-15: Lynx: Buffer overflow in NNTP processing

Title:Lynx: Buffer overflow in NNTP processing
Bugs: #108451


Lynx contains a buffer overflow that may be exploited to execute arbitrary code.


Lynx is a text-mode browser for the World Wide Web. It supports multiple URL types, including HTTP and NNTP URLs.

Affected packages

Package Vulnerable Unaffected Architecture(s)
www-client/lynx < 2.8.5-r1 >= 2.8.5-r1 All supported architectures


When accessing a NNTP URL, Lynx connects to a NNTP server and retrieves information about the available articles in the target newsgroup. Ulf Harnhammar discovered a buffer overflow in a function that handles the escaping of special characters.


An attacker could setup a malicious NNTP server and entice a user to access it using Lynx (either by creating NNTP links on a web page or by forcing a redirect for Lynx users). The data returned by the NNTP server would trigger the buffer overflow and execute arbitrary code with the rights of the user running Lynx.


There is no known workaround at this time.


All Lynx users should upgrade to the latest version:

    # emerge --sync
    # emerge --ask --oneshot --verbose ">=www-client/lynx-2.8.5-r1"



This GLSA and any updates to it are available for viewing at the Gentoo Security Website:


Security is a primary focus of Gentoo Linux and ensuring the confidentiality and security of our users machines is of utmost importance to us. Any security concerns should be addressed to or alternatively, you may file a bug at


Copyright 2010 Gentoo Foundation, Inc; referenced text belongs to its owner(s). The contents of this document are licensed under the Creative Commons - Attribution / Share Alike license.

Thank you!