Ella Core vulnerable to Unauthenticated AMF DoS via malformed InitialUEMessage with undersized integrity-protected NAS payload

Mô tả

Tham khảo

• ellanetworks/core security advisory · WEB
• nvd.nist.gov/vuln/detail/CVE-2026-32319 · ADVISORY
• ellanetworks/core · PACKAGE
• ellanetworks/core release v1.5.1 · WEB
• pkg.go.dev/vuln/GO-2026-4692 · WEB

Lỗ hổng khác của github.com/ellanetworks/core

• CVE-2026-44475TRUNG BÌNH 6.1Ella Core is a 5G core designed for private networks. Prior to 1.10.0, Ella Core does not verify the UE Security Capabilities received in NG…
• CVE-2026-44474THẤP 3.7Ella Core is a 5G core designed for private networks. Prior to 1.10.0, Ella Core didn't enforce security rules on concurrent running of secu…
• CVE-2026-44473CAO 7.1Ella Core is a 5G core designed for private networks. Prior to 1.10.0, a radio with a valid NG Setup can send a forged PDUSessionResourceSet…
• CVE-2026-34762THẤP 2.7Ella Core is a 5G core designed for private networks. Prior to version 1.8.0, the PUT /api/v1/subscriber/{imsi} API accepts an IMSI identifi…
• CVE-2026-34761TRUNG BÌNH 6.5Ella Core is a 5G core designed for private networks. Prior to version 1.8.0, Ella Core panics when processing a NGAP handover failure messa…