kitabisa/teler · Security
Denial-of-Service within Docker container
- GHSA ID
- GHSA-jhj6-5mh6-4pvf
- CVE ID
- CVE-2020-26213
- Severity
- medium
- Published
- Updated
- CVSS
- 5.9 · CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
- CVSS v3
- 5.9 · CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
Description
Impact
If you run teler inside a Docker container and encounter errors.Exit function, it will cause denial-of-service (SIGSEGV) because it doesn't get process ID and process group ID of teler properly to kills.
Specific Go Packages Affected
ktbs.dev/teler/pkg/errors
Patches
Upgrade to the >= 0.0.1 version.
Workarounds
N/A
References
For more information
If you have any questions or comments about this advisory:
- Open an issue in Issues Section
- Email us at [email protected]
CWEs
- CWE-476 · NULL Pointer Dereference