A buffer overflow has been discovered in a portion of the control message handling code introduced in INN 2.4.0. It is likely that this overflow could be remotely exploited to gain access to the user innd runs as. INN versions 2.3.x and below are not affected.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/32486/inn240.txt
Source: https://packetstormsecurity.com/files/32486/inn240.txt.html