GitHub Advisoryadvisory · Go

GHSA-jhj6-5mh6-4pvf Denial-of-Service within Docker container

MEDIUM Published 2021-05-24 Modified 2023-10-02 Official page ↗
Aliases
CVE-2020-26213
Ecosystem
Go
Packages
ktbs.dev/teler
Severity
Moderate
CVSS vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
Weaknesses
CWE-476
Reviewed
2021-05-21

Affected packages

• Go ktbs.dev/teler: < 0.0.1 → fixed in 0.0.1

Description

Impact If you run teler inside a Docker container and encounter `errors.Exit` function, it will cause denial-of-service (`SIGSEGV`) because it doesn't get process ID and process group ID of teler properly to kills. Specific Go Packages Affected ktbs.dev/teler/pkg/errors Patches Upgrade to the >= 0.0.1 version. Workarounds N/A References • https://github.com/kitabisa/teler/commit/ec6082049dba9e44a21f35fb7b123d42ce1a1a7e For more information If you have any questions or comments about this advisory: • Open an issue in Issues Section • Email us at [email protected]

Related

Alias · CVE (1)

  • CVE-2020-26213 In teler before version 0.0.1, if you run teler inside a Docker container and encounter `errors.Exit` function, it will cause… vulnerability

Weakness · CWE (1)

  • CWE-476 NULL Pointer Dereference weakness

References