Skip to content
This repository has been archived by the owner on Feb 13, 2024. It is now read-only.

Denial-of-Service within Docker container

Moderate
dwisiswant0 published GHSA-jhj6-5mh6-4pvf Nov 5, 2020

Package

errors.go (ktbs.dev/teler/pkg/errors)

Affected versions

< v0.0.1-rc2.1

Patched versions

v0.0.1-dev5.1, v0.0.1

Description

Impact

If you run teler inside a Docker container and encounter errors.Exit function, it will cause denial-of-service (SIGSEGV) because it doesn't get process ID and process group ID of teler properly to kills.

Patches

Upgrade to the >= 0.0.1 version.

Workarounds

N/A

References

For more information

If you have any questions or comments about this advisory:

Severity

Moderate

CVE ID

CVE-2020-26213

Weaknesses

No CWEs