DEBIAN-CVE-2026-54634
Hamlib is a ham radio control library for radios, rotators, and amplifiers. Prior to 4.7.2, the unauthenticated rigctld send_raw command on TCP port 4532 reaches rigctl_send_raw() in tests/rigctl_parse.c, which writes a NUL byte at buf[buf_len + 1] outside its 200-byte stack buffer, and rig_send_raw() in src/rig.c, which copies reply_len - 1 bytes instead of the actual nbytes received. A remote client can send the CR terminator with a short payload to trigger both flaws in one command under the default no-password configuration. The out-of-bounds write can crash the daemon or corrupt adjacent stack memory, while the oversized copy can return up to 198 bytes of uninitialized stack data to the client. This issue is fixed in version 4.7.2.
DEBIAN-CVE-2026-54634
Primary source · Revision 1
Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.
Security context
Source reference: osv:DEBIAN-CVE-2026-54634
hamlib
Source reference: /affected/0/package/name
- Affected versions
- 4.5.4-1
Source reference:
/affected/0/versions4.5.5-1Source reference:
/affected/0/versions4.5.5-2Source reference:
/affected/0/versions4.5.5-3Source reference:
/affected/0/versions4.5.5-3.1Source reference:
/affected/0/versions4.5.5-3.1~exp1Source reference:
/affected/0/versions4.5.5-3.1~exp2Source reference:
/affected/0/versions4.5.5-3.2Source reference:
/affected/0/versions4.5.5-4Source reference:
/affected/0/versions4.6.1-1Source reference:
/affected/0/versions4.6.2-1Source reference:
/affected/0/versions4.6.3-1Source reference:
/affected/0/versions4.6.4-1Source reference:
/affected/0/versions4.6.4-2Source reference:
/affected/0/versions4.6.4-3Source reference:
/affected/0/versions4.6.5-1Source reference:
/affected/0/versions4.6.5-2Source reference:
/affected/0/versions4.6.5-3Source reference:
/affected/0/versions4.6.5-4Source reference:
/affected/0/versions4.6.5-5Source reference:
/affected/0/versions4.7.1-1Source reference:
/affected/0/versions4.7.1-2Source reference:
/affected/0/versions4.7.1-3Source reference:
/affected/0/versions4.7.2-1Source reference:
/affected/0/versions4.7.2-1~bpo13+1Source reference:
/affected/0/versions4.7.2-2Source reference:
/affected/0/versions - Fixed versions
- Not stated in this record
- Prerequisites
- Not stated in this record
hamlib
Source reference: /affected/1/package/name
- Affected versions
- 4.6.2-1
Source reference:
/affected/1/versions4.6.3-1Source reference:
/affected/1/versions4.6.4-1Source reference:
/affected/1/versions4.6.4-2Source reference:
/affected/1/versions4.6.4-3Source reference:
/affected/1/versions4.6.5-1Source reference:
/affected/1/versions4.6.5-2Source reference:
/affected/1/versions4.6.5-3Source reference:
/affected/1/versions4.6.5-4Source reference:
/affected/1/versions4.6.5-5Source reference:
/affected/1/versions4.7.1-1Source reference:
/affected/1/versions4.7.1-2Source reference:
/affected/1/versions4.7.1-3Source reference:
/affected/1/versions4.7.2-1Source reference:
/affected/1/versions4.7.2-1~bpo13+1Source reference:
/affected/1/versions4.7.2-2Source reference:
/affected/1/versions - Fixed versions
- Not stated in this record
- Prerequisites
- Not stated in this record
hamlib
Source reference: /affected/2/package/name
- Affected versions
- 4.6.2-1
Source reference:
/affected/2/versions4.6.3-1Source reference:
/affected/2/versions4.6.4-1Source reference:
/affected/2/versions4.6.4-2Source reference:
/affected/2/versions4.6.4-3Source reference:
/affected/2/versions4.6.5-1Source reference:
/affected/2/versions4.6.5-2Source reference:
/affected/2/versions4.6.5-3Source reference:
/affected/2/versions4.6.5-4Source reference:
/affected/2/versions4.6.5-5Source reference:
/affected/2/versions4.7.1-1Source reference:
/affected/2/versions4.7.1-2Source reference:
/affected/2/versions4.7.1-3Source reference:
/affected/2/versions4.7.2-1~bpo13+1Source reference:
/affected/2/versions - Fixed versions
- 4.7.2-1
Source reference:
/affected/2/ranges - Prerequisites
- Not stated in this record
Structured affected-version data
Original package identities and version rules from this source.
[
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
}
]
}
],
"package": {
"name": "hamlib",
"purl": "pkg:deb/debian/hamlib?arch=source&distro=bookworm",
"ecosystem": "Debian:12"
},
"versions": [
"4.5.4-1",
"4.5.5-1",
"4.5.5-2",
"4.5.5-3",
"4.5.5-3.1",
"4.5.5-3.1~exp1",
"4.5.5-3.1~exp2",
"4.5.5-3.2",
"4.5.5-4",
"4.6.1-1",
"4.6.2-1",
"4.6.3-1",
"4.6.4-1",
"4.6.4-2",
"4.6.4-3",
"4.6.5-1",
"4.6.5-2",
"4.6.5-3",
"4.6.5-4",
"4.6.5-5",
"4.7.1-1",
"4.7.1-2",
"4.7.1-3",
"4.7.2-1",
"4.7.2-1~bpo13+1",
"4.7.2-2"
],
"database_specific": {
"source": "https://storage.googleapis.com/debian-osv/debian-cve-osv/DEBIAN-CVE-2026-54634.json"
},
"ecosystem_specific": {
"urgency": "not yet assigned"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
}
]
}
],
"package": {
"name": "hamlib",
"purl": "pkg:deb/debian/hamlib?arch=source&distro=trixie",
"ecosystem": "Debian:13"
},
"versions": [
"4.6.2-1",
"4.6.3-1",
"4.6.4-1",
"4.6.4-2",
"4.6.4-3",
"4.6.5-1",
"4.6.5-2",
"4.6.5-3",
"4.6.5-4",
"4.6.5-5",
"4.7.1-1",
"4.7.1-2",
"4.7.1-3",
"4.7.2-1",
"4.7.2-1~bpo13+1",
"4.7.2-2"
],
"database_specific": {
"source": "https://storage.googleapis.com/debian-osv/debian-cve-osv/DEBIAN-CVE-2026-54634.json"
},
"ecosystem_specific": {
"urgency": "not yet assigned"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "4.7.2-1"
}
]
}
],
"package": {
"name": "hamlib",
"purl": "pkg:deb/debian/hamlib?arch=source&distro=forky",
"ecosystem": "Debian:14"
},
"versions": [
"4.6.2-1",
"4.6.3-1",
"4.6.4-1",
"4.6.4-2",
"4.6.4-3",
"4.6.5-1",
"4.6.5-2",
"4.6.5-3",
"4.6.5-4",
"4.6.5-5",
"4.7.1-1",
"4.7.1-2",
"4.7.1-3",
"4.7.2-1~bpo13+1"
],
"database_specific": {
"source": "https://storage.googleapis.com/debian-osv/debian-cve-osv/DEBIAN-CVE-2026-54634.json"
},
"ecosystem_specific": {
"urgency": "not yet assigned"
}
}
]Publisher severity
No explicit severity was provided.
- Event
- #15018 · Revision 1
- Added to Heist Feed
- Publisher date