Ueransim
Monthly
Uncaught exception in UERANSIM up to v3.2.7 allows remote unauthenticated attackers to crash the Radio Link Simulation (RLS) message decoder by sending a crafted PDU with an oversized or malformed pduLength field, causing denial of service against 5G simulation sessions. The SSVC framework marks this as automatable with a POC exploit available, though real-world impact is constrained to research and testing environments given the product's deployment profile. A vendor patch (v3.2.8) was released promptly after responsible disclosure, confirmed by the upstream GitHub release tag.
Uncaught exception in UERANSIM up to v3.2.7 allows remote unauthenticated attackers to crash the Radio Link Simulation (RLS) message decoder by sending a crafted PDU with an oversized or malformed pduLength field, causing denial of service against 5G simulation sessions. The SSVC framework marks this as automatable with a POC exploit available, though real-world impact is constrained to research and testing environments given the product's deployment profile. A vendor patch (v3.2.8) was released promptly after responsible disclosure, confirmed by the upstream GitHub release tag.