| Package | Affected versions | Patched versions |
|---|---|---|
| github.com/ellanetworks/core | < 1.8.0 | 1.8.0 |
| ella core | < 1.8.0 | 1.8.0 |
Ella Core panics when processing a NGAP handover failure message.
If an attacker can force a gNodeB to send NGAP handover failure messages to Ella Core, the process will crash, thereby disrupting service for all connected subscribers.
Improve guards in NGAP handover handlers.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free