CVE-2017-16336: Multiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the "cc" channel of Insteon Hub running firmware version 1012…

PriorityP351critical9.9CVSS 3.1

AVNACLPRLUINSCCHIHAH

EPSS

0.67%

47.5th percentile

Multiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the "cc" channel of Insteon Hub running firmware version 1012. Specially crafted commands sent through the PubNub service can cause a stack-based buffer overflow overwriting arbitrary data. An attacker should send an authenticated HTTP request to trigger this vulnerability. In cmd s_event_var, at 0x9d01eeb0, the value for the `s_value` key is copied using `strcpy` to the buffer at `$sp+0x10`.This buffer is 244 bytes large, sending anything longer will cause a buffer overflow.

Affected

5 ranges

Vendor	Product	Version range	Fixed in
exiv2	exiv2	>= 0 < 0.23-1ubuntu2.2	0.23-1ubuntu2.2
exiv2	exiv2	>= 0 < 0.25-2.1ubuntu16.04.3	0.25-2.1ubuntu16.04.3
exiv2	exiv2	>= 0 < 0.25-3.1ubuntu0.18.04.2	0.25-3.1ubuntu0.18.04.2
insteon	hub	—	—
insteon	hub_firmware	—	—

CVSS provenance

nvdv3.19.9CRITICALCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

nvdv3.08.5HIGHCVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H

osv7.5HIGH

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.