github.com/ellanetworks/core vulnerabilities (Go)
14 vulnerabilities.
-
github.com/ellanetworks/coreGo Ella Core: Handover failures during concurrent Security Mode Command 3.7 Low -
github.com/ellanetworks/coreGo Ella Core: UE Security Capability bypass on NGAP PathSwitchRequest 6.1 Medium -
github.com/ellanetworks/coreGo Ella Core: UE Downlink Redirection via Forged PDUSessionResourceSetupResponse 7.1 High -
github.com/ellanetworks/coreGo Ella Core Has Audit Log Falsification via Path/Body IMSI Mismatch in UpdateSubscriber 2.7 Low -
github.com/ellanetworks/coreGo Ella Core Panics Upon NGAP handover failure 5.8 Medium -
github.com/ellanetworks/coreGo Ella Core Panics during NAS Authentication Response/Failure with missing IEs 6.5 Medium -
github.com/ellanetworks/coreGo Ella Core has Privilege Escalation via Database Restore by NetworkManager role 7.2 High -
github.com/ellanetworks/coreGo Ella Core has a Denial of Service via SCTP connection cleanup deadlock 6.5 Medium -
github.com/ellanetworks/coreGo Ella Core panics when processing a crafted NGAP LocationReport message 6.5 Medium -
github.com/ellanetworks/coreGo Ella Core panics on malformed ULNASTransport Message without a Request Type 6.5 Medium -
github.com/ellanetworks/coreGo Ella Core panics on malformed NGAP Location Report 7.5 High -
github.com/ellanetworks/coreGo Ella Core panics on invalid PDU Session IDs in NGAP messages 6.5 Medium -
github.com/ellanetworks/coreGo Ella Core: AMF DoS via malformed PathSwitchRequest with empty NR security capability bitstrings 6.5 Medium -
github.com/ellanetworks/coreGo Ella Core: Unauthenticated AMF DoS via malformed InitialUEMessage with undersized integrity-protected NAS payload 7.5 High