30 matches found
MGASA-2026-0475 Updated hamlib packages fix a security vulnerability
Prior to 4.7.2, the unauthenticated rigctld sendraw command on TCP port 4532 reaches rigctlsendraw in tests/rigctlparse.c, which writes a NUL byte at bufbuflen + 1 outside its 200-byte stack buffer, and rigsendraw in src/rig.c, which copies replylen - 1 bytes instead of the actual nbytes received...
7.3CVSS5.9AI score0.00441EPSS
SaveExploits0References2
20