Ella Core panics when processing a crafted NGAP LocationReport message

概要

参考情報

• ellanetworks/core security advisory · WEB
• nvd.nist.gov/vuln/detail/CVE-2026-33903 · ADVISORY
• ellanetworks/core commit ec77a2a · WEB
• ellanetworks/core · PACKAGE
• ellanetworks/core release v1.7.0 · WEB

github.com/ellanetworks/core のその他の脆弱性

• CVE-2026-44475中 6.1Ella Core is a 5G core designed for private networks. Prior to 1.10.0, Ella Core does not verify the UE Security Capabilities received in NG…
• CVE-2026-44474低 3.7Ella Core is a 5G core designed for private networks. Prior to 1.10.0, Ella Core didn't enforce security rules on concurrent running of secu…
• CVE-2026-44473高 7.1Ella Core is a 5G core designed for private networks. Prior to 1.10.0, a radio with a valid NG Setup can send a forged PDUSessionResourceSet…
• CVE-2026-34762低 2.7Ella Core is a 5G core designed for private networks. Prior to version 1.8.0, the PUT /api/v1/subscriber/{imsi} API accepts an IMSI identifi…
• CVE-2026-34761中 6.5Ella Core is a 5G core designed for private networks. Prior to version 1.8.0, Ella Core panics when processing a NGAP handover failure messa…