UERANSIM vulnerabilities

A flaw in UERANSIM up to 3.3.0 affects the DecodePlainMmMessage function in the library src/lib/nas/encode.cpp of the nr-gnb component. Executing a manipulation leads to an uncaught exception. The attack can be launched remotely, and the exploit has been published.

A memory corruption vulnerability was found in UERANSIM up to 3.3.0 in the ULInformationTransfer function. Manipulating the dedicatedNASMessage argument leads to memory corruption. The attack can be initiated remotely and the exploit is public.

Vulnerability in aligungr UERANSIM up to version 3.2.7. The function rls::DecodeRlsMessage in the library src/lib/rls/rls_pdu.cpp of the Radio Link Simulation Layer component leads to an uncaught exception when manipulating the pduLength argument. The attack may be initiated remotely. Fixed in version 3.2.8.