GHSA-55q8-2gwx-29pcPublished

Ella Core Panics during NAS Authentication Response/Failure with missing IEs

Exact source revision recorded 24 Oct 2026 13:19:41 UTC. It does not establish the source's current position. Latest evidence.

Recorded JSON

osv · GHSA-55q8-2gwx-29pc

Published

## Summary Ella Core panics when processing Authentication Response and Authentication Failure NAS message missing IEs. ## Impact An attacker able to send crafted NAS messages to Ella Core can crash the process, causing service disruption for all connected subscribers. No authentication is required. ## Fix Added IE presence verification to NAS message handling.

Source published: 26 Mar 2026 22:15:54 UTC
Source modified: 2 Apr 2026 21:26:08 UTC
Observed here: 24 Oct 2026 13:19:41 UTC
Source terms: GitHub Advisory Database · CC-BY-4.0

Original source record · Cite this exact observation · Complete original publisher JSON

This view projects the publisher's source fields for reading; the original JSON retains additional fields and CVE enrichment containers. Attribution: osv · GitHub Advisory Database · CC-BY-4.0. Source text is retained; field grouping and change labels are provided by ChangeIntel.

CVSS_V3 · CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Publisher rating · MODERATE