medium5.5
CVE-2024-37877
UERANSIM before 3.2.6 allows out-of-bounds read when a RLS packet is sent to gNodeB with malformed PDU length.
Impact
UERANSIM before 3.2.6 allows out-of-bounds read when a RLS packet is sent to gNodeB with malformed PDU length. This occurs in function readOctetString in src/utils/octet_view.cpp and in function DecodeRlsMessage in src/lib/rls/rls_pdu.cpp
Affected products
| Product | Affected versions |
|---|---|
| UERANSIM | before 3.2.6 |
Versions were read from the advisory text. No structured product data has been published for this record yet.