beepmargeddon is a local privilege exploit, not a RCE. I'm not aware of any debian package (I don't use debian that often though so mind that) that A) installs

beepmargeddon is a local privilege exploit, not a RCE. I'm not aware of any debian package (I don't use debian that often though so mind that) that A) installs a network service and B) uses unsafe defaults while C) activating the service on boot by default