medium5.9
CVE-2020-26213
Denial-of-Service within Docker container
Impact
### Impact If you run teler inside a Docker container and encounter `errors.Exit` function, it will cause denial-of-service (`SIGSEGV`) because it doesn't get process ID and process group ID of teler properly to kills. ### Specific Go Packages Affected ktbs.dev/teler/pkg/errors ### Patches Upgrade to the >= 0.0.1 version. ### Workarounds N/A ### References - https://github.com/kitabisa/teler/commit/ec6082049dba9e44a21f35fb7b123d42ce1a1a7e ### For more information If you have any questions or comments about this advisory: * Open an issue in [Issues Section](https://github.com/kitabisa/teler/issues) * Email us at [infosec@kitabisa.com](mailto:infosec@kitabisa.com)
Affected packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| go | ktbs.dev/teler | < 0.0.1 | 0.0.1 |
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Teler Project | Teler | before 0.0.1 |