Ella Core NGAP Handover Failure Message Processing Panic Vulnerability

A denial-of-service vulnerability has been identified in Ella Core versions prior to 1.8.0. The issue arises when the application processes NGAP handover failure messages, leading to a process crash. This disruption affects all connected subscribers. The vulnerability can be exploited by causing a gNodeB to send NGAP handover failure messages to Ella Core.

Impact

Exploitation of this vulnerability causes a process panic, leading to a crash that disrupts service for all connected subscribers.

Remediation

Users can upgrade to Ella Core version 1.8.0 or later to address this vulnerability.