CVE catalog

CVE-2026-54634

Severity: High · CVSS 8.6CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H
Published: Jun 22, 2026, 12:00:00 AM UTC
Updated: Sep 17, 2026, 10:17:01 PM UTC
Source: [NVD] · [CVE record]
EPSS: 0.44% · Oct 25, 2026

Hamlib is a ham radio control library for radios, rotators, and amplifiers. Prior to 4.7.2, the unauthenticated rigctld send_raw command on TCP port 4532 reaches rigctl_send_raw() in tests/rigctl_parse.c, which writes a NUL byte at buf[buf_len + 1] outside its 200-byte stack buffer, and rig_send_raw() in src/rig.c, which copies reply_len - 1 bytes instead of the actual nbytes received. A remote client can send the CR terminator with a short payload to trigger both flaws in one command under the default no-password configuration. The out-of-bounds write can crash the daemon or corrupt adjacent stack memory, while the oversized copy can return up to 198 bytes of uninitialized stack data to the client. This issue is fixed in version 4.7.2.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

Distribution	Package	Release	Version	Status
Debian	hamlib	sid	`4.7.2-2`	fixed
Debian	hamlib	forky	`4.7.2-2`	fixed
Debian	hamlib	trixie	`4.6.2-1`	vulnerable
Debian	hamlib	bookworm	`4.5.4-1`	vulnerable
Ubuntu	hamlib	16.04	`1.2.15.3-3`	vulnerable
Ubuntu	hamlib	16.04	`1.2.15.3-3.1`	vulnerable
Ubuntu	hamlib	16.04	`1.2.15.3-3.1build1`	vulnerable
Ubuntu	hamlib	18.04	`3.1-7`	vulnerable
Ubuntu	hamlib	18.04	`3.1-7build1`	vulnerable
Ubuntu	hamlib	20.04	`3.3-5`	vulnerable
Ubuntu	hamlib	20.04	`3.3-5ubuntu1`	vulnerable
Ubuntu	hamlib	20.04	`3.3-7`	vulnerable
Ubuntu	hamlib	20.04	`3.3-8`	vulnerable
Ubuntu	hamlib	20.04	`3.3-10`	vulnerable
Ubuntu	hamlib	20.04	`3.3-10build1`	vulnerable
Ubuntu	hamlib	22.04	`4.0-7`	vulnerable
Ubuntu	hamlib	22.04	`4.0-7build1`	vulnerable
Ubuntu	hamlib	22.04	`4.3.1-1`	vulnerable
Ubuntu	hamlib	22.04	`4.3.1-1build1`	vulnerable
Ubuntu	hamlib	22.04	`4.3.1-1build2`	vulnerable
Ubuntu	hamlib	24.04	`4.5.5-2`	vulnerable
Ubuntu	hamlib	24.04	`4.5.5-2build1`	vulnerable
Ubuntu	hamlib	24.04	`4.5.5-3`	vulnerable
Ubuntu	hamlib	24.04	`4.5.5-3build2`	vulnerable
Ubuntu	hamlib	24.04	`4.5.5-3.2build1`	vulnerable
Ubuntu	hamlib	24.04	`4.5.5-3.2build2`	vulnerable
Ubuntu	hamlib	26.04	`4.6.2-1build1`	vulnerable
Ubuntu	hamlib	26.04	`4.6.2-1build2`	vulnerable
Ubuntu	hamlib	26.04	`4.6.5-5`	vulnerable
Ubuntu	hamlib	26.04	`4.6.5-5build1`	vulnerable
Opensuse	hamlib	leap 16.0	`4.7.2-bp160.1.1`	fixed
Opensuse	hamlib	tumbleweed	`4.7.2-1.1`	fixed

Fixed-version evidence

Distribution	Package	Type	Release	Fixed version	Urgency	Origin	Bugs
Debian	hamlib	source	sid	`4.7.2-1`	not yet assigned	Not reported	Not reported
Debian	hamlib	source	forky	`4.7.2-1`	not yet assigned	Not reported	Not reported
Debian	hamlib	source	trixie	`(unfixed)`	not yet assigned	Not reported	Not reported
Debian	hamlib	source	bookworm	`(unfixed)`	not yet assigned	Not reported	Not reported
Opensuse	hamlib	rpm	leap 16.0	`4.7.2-bp160.1.1`	Not reported	OPENSUSE-SU-2026:21155-1	Not reported
Opensuse	hamlib	rpm	tumbleweed	`4.7.2-1.1`	Not reported	OPENSUSE-SU-2026:11089-1	Not reported

Notes

[trixie] hamlib: Minor issue [bookworm] hamlib: Minor issue

OpenFactory catalog packages

[Debian 12 (Bookworm)]

[libhamlib2-perl]Affected
Source package: [hamlib]
Details (2)
- 4.5.4-1 · all · bookworm
  Affected
  nvd · hamlib · debian · bookworm; nvd · hamlib · debian · 12
- 4.5.4-1 · all · bookworm
  Affected
  nvd · hamlib · debian · bookworm; nvd · hamlib · debian · 12
[libhamlib2-tcl]Affected
Source package: [hamlib]
Details (2)
- 4.5.4-1 · all · bookworm
  Affected
  nvd · hamlib · debian · bookworm; nvd · hamlib · debian · 12
- 4.5.4-1 · all · bookworm
  Affected
  nvd · hamlib · debian · bookworm; nvd · hamlib · debian · 12
[libhamlib++4]Affected
Source package: [hamlib]
Details (2)
- 4.5.4-1+b1 · amd64 · bookworm
  Affected
  nvd · hamlib · debian · bookworm; nvd · hamlib · debian · 12
- 4.5.4-1+b1 · arm64 · bookworm
  Affected
  nvd · hamlib · debian · bookworm; nvd · hamlib · debian · 12
[libhamlib4]Affected
Source package: [hamlib]
Details (2)
- 4.5.4-1+b1 · amd64 · bookworm
  Affected
  nvd · hamlib · debian · bookworm; nvd · hamlib · debian · 12
- 4.5.4-1+b1 · arm64 · bookworm
  Affected
  nvd · hamlib · debian · bookworm; nvd · hamlib · debian · 12
[libhamlib++-dev]Affected
Source package: [hamlib]
Details (2)
- 4.5.4-1+b1 · amd64 · bookworm
  Affected
  nvd · hamlib · debian · bookworm; nvd · hamlib · debian · 12
- 4.5.4-1+b1 · arm64 · bookworm
  Affected
  nvd · hamlib · debian · bookworm; nvd · hamlib · debian · 12
[libhamlib-dev]Affected
Source package: [hamlib]
Details (2)
- 4.5.4-1+b1 · amd64 · bookworm
  Affected
  nvd · hamlib · debian · bookworm; nvd · hamlib · debian · 12
- 4.5.4-1+b1 · arm64 · bookworm
  Affected
  nvd · hamlib · debian · bookworm; nvd · hamlib · debian · 12
[libhamlib-doc]Affected
Source package: [hamlib]
Details (2)
- 4.5.4-1 · all · bookworm
  Affected
  nvd · hamlib · debian · bookworm; nvd · hamlib · debian · 12
- 4.5.4-1 · all · bookworm
  Affected
  nvd · hamlib · debian · bookworm; nvd · hamlib · debian · 12
[libhamlib-perl]Affected
Source package: [hamlib]
Details (2)
- 4.5.4-1+b1 · amd64 · bookworm
  Affected
  nvd · hamlib · debian · bookworm; nvd · hamlib · debian · 12
- 4.5.4-1+b1 · arm64 · bookworm
  Affected
  nvd · hamlib · debian · bookworm; nvd · hamlib · debian · 12
[libhamlib-utils]Affected
Source package: [hamlib]
Details (2)
- 4.5.4-1+b1 · amd64 · bookworm
  Affected
  nvd · hamlib · debian · bookworm; nvd · hamlib · debian · 12
- 4.5.4-1+b1 · arm64 · bookworm
  Affected
  nvd · hamlib · debian · bookworm; nvd · hamlib · debian · 12
[lua-hamlib]Affected
Source package: [hamlib]
Details (2)
- 4.5.4-1+b1 · amd64 · bookworm
  Affected
  nvd · hamlib · debian · bookworm; nvd · hamlib · debian · 12
- 4.5.4-1+b1 · arm64 · bookworm
  Affected
  nvd · hamlib · debian · bookworm; nvd · hamlib · debian · 12
[lua-hamlib2]Affected
Source package: [hamlib]
Details (2)
- 4.5.4-1 · all · bookworm
  Affected
  nvd · hamlib · debian · bookworm; nvd · hamlib · debian · 12
- 4.5.4-1 · all · bookworm
  Affected
  nvd · hamlib · debian · bookworm; nvd · hamlib · debian · 12
[python3-hamlib]Affected
Source package: [hamlib]
Details (2)
- 4.5.4-1+b1 · amd64 · bookworm
  Affected
  nvd · hamlib · debian · bookworm; nvd · hamlib · debian · 12
- 4.5.4-1+b1 · arm64 · bookworm
  Affected
  nvd · hamlib · debian · bookworm; nvd · hamlib · debian · 12
[python3-libhamlib2]Affected
Source package: [hamlib]
Details (2)
- 4.5.4-1+b1 · amd64 · bookworm
  Affected
  nvd · hamlib · debian · bookworm; nvd · hamlib · debian · 12
- 4.5.4-1+b1 · arm64 · bookworm
  Affected
  nvd · hamlib · debian · bookworm; nvd · hamlib · debian · 12
[tcl-hamlib]Affected
Source package: [hamlib]
Details (2)
- 4.5.4-1+b1 · amd64 · bookworm
  Affected
  nvd · hamlib · debian · bookworm; nvd · hamlib · debian · 12
- 4.5.4-1+b1 · arm64 · bookworm
  Affected
  nvd · hamlib · debian · bookworm; nvd · hamlib · debian · 12

[Debian 13 (Trixie)]

[libhamlib++4t64]Affected
Source package: [hamlib]
Details (4)
- 4.6.2-1+b1 · amd64 · trixie
  Affected
  nvd · hamlib · debian · 13
- 4.6.2-1+b1 · arm64 · trixie
  Affected
  nvd · hamlib · debian · 13
- 4.7.2-1~bpo13+1 · amd64 · trixie-backports
  Affected
  nvd · hamlib · debian · 13
- 4.7.2-1~bpo13+1 · arm64 · trixie-backports
  Affected
  nvd · hamlib · debian · 13
[libhamlib4t64]Affected
Source package: [hamlib]
Details (4)
- 4.6.2-1+b1 · amd64 · trixie
  Affected
  nvd · hamlib · debian · 13
- 4.6.2-1+b1 · arm64 · trixie
  Affected
  nvd · hamlib · debian · 13
- 4.7.2-1~bpo13+1 · amd64 · trixie-backports
  Affected
  nvd · hamlib · debian · 13
- 4.7.2-1~bpo13+1 · arm64 · trixie-backports
  Affected
  nvd · hamlib · debian · 13
[libhamlib++-dev]Affected
Source package: [hamlib]
Details (2)
- 4.6.2-1+b1 · amd64 · trixie
  Affected
  nvd · hamlib · debian · 13
- 4.6.2-1+b1 · arm64 · trixie
  Affected
  nvd · hamlib · debian · 13
[libhamlib-dev]Affected
Source package: [hamlib]
Details (4)
- 4.6.2-1+b1 · amd64 · trixie
  Affected
  nvd · hamlib · debian · 13
- 4.6.2-1+b1 · arm64 · trixie
  Affected
  nvd · hamlib · debian · 13
- 4.7.2-1~bpo13+1 · amd64 · trixie-backports
  Affected
  nvd · hamlib · debian · 13
- 4.7.2-1~bpo13+1 · arm64 · trixie-backports
  Affected
  nvd · hamlib · debian · 13
[libhamlib-doc]Affected
Source package: [hamlib]
Details (4)
- 4.6.2-1 · all · trixie
  Affected
  nvd · hamlib · debian · 13
- 4.6.2-1 · all · trixie
  Affected
  nvd · hamlib · debian · 13
- 4.7.2-1~bpo13+1 · all · trixie-backports
  Affected
  nvd · hamlib · debian · 13
- 4.7.2-1~bpo13+1 · all · trixie-backports
  Affected
  nvd · hamlib · debian · 13
[libhamlib-perl]Affected
Source package: [hamlib]
Details (4)
- 4.6.2-1+b1 · amd64 · trixie
  Affected
  nvd · hamlib · debian · 13
- 4.6.2-1+b1 · arm64 · trixie
  Affected
  nvd · hamlib · debian · 13
- 4.7.2-1~bpo13+1 · amd64 · trixie-backports
  Affected
  nvd · hamlib · debian · 13
- 4.7.2-1~bpo13+1 · arm64 · trixie-backports
  Affected
  nvd · hamlib · debian · 13

Next results

Observed: Oct 23, 2026, 9:45:34 PM UTC

References

[Debian Security Tracker] · [FIRST EPSS] · [National Vulnerability Database (NVD)] · [OSV Package Vulnerability Database] · [Red Hat security advisories and VEX] · [SUSE security advisories and VEX]