Multiple exploitable buffer overflow vulnerabilities...
Critical severity
Unreviewed
Published
Jan 12, 2023
to the GitHub Advisory Database
•
Updated Jan 27, 2023
Description
Published by the National Vulnerability Database
Jan 11, 2023
Published to the GitHub Advisory Database
Jan 12, 2023
Last updated
Jan 27, 2023
Multiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the "cc" channel of Insteon Hub running firmware version 1012. Specially crafted commands sent through the PubNub service can cause a stack-based buffer overflow overwriting arbitrary data. An attacker should send an authenticated HTTP request to trigger this vulnerability. In cmd sn_exw, at 0x9d01b310, the value for the
cmd1
key is copied usingstrcpy
to the buffer at$sp+0x2d0
.This buffer is 100 bytes large, sending anything longer will cause a buffer overflow.References