| Package | Affected versions | Patched versions |
|---|---|---|
| github.com/ellanetworks/core | < 1.6.0 | 1.6.0 |
| ella core | < 1.6.0 | 1.6.0 |
Ella Core panics when processing malformed UL NAS Transport NAS messages without a Request Type.
An attacker able to send crafted NAS messages to Ella Core can crash the process, causing service disruption for all connected subscribers. No authentication is required.
Add a guard when receiving an UL NAS Message without a Request Type given no SM Context.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free