Medium, CVSS 5.9GoPublished
Denial-of-Service within Docker container
CVE-2020-26213 · GHSA-jhj6-5mh6-4pvf
- Affected
- Go ktbs.dev/teler < 0.0.1
- Fixed in
- 0.0.1· Vendor fix available
- Issue
- Impact If you run teler inside a Docker container and encounter errors.Exit function, it will cause denial-of-service (SIGSEGV) because it doesn't get process ID and process group ID of teler properly to kills. Specific Go Packages Affected ktbs.dev/teler/pkg/errors Patches Upgrade to the = 0.0.1 version. Workarounds N/A References - https://github.com/kitabisa/teler/commit/ec6082049dba9e44a21f35fb7b123d42ce1a1a7e For more information If you have any questions or comments about this advisory: Open an issue in Issues Section Email us at infosec@kitabisa.com
Recommended action: Upgrade to 0.0.1 or later, then redeploy and verify.A vendor fix does not resolve your finding until you verify it in your own systems.