Ecosyste.ms: Advisories

Security Advisories: MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLWpoajYtNW1oNi00cHZm

Denial-of-Service within Docker container

Impact

If you run teler inside a Docker container and encounter errors.Exit function, it will cause denial-of-service (SIGSEGV) because it doesn't get process ID and process group ID of teler properly to kills.

Patches

Upgrade to the >= 0.0.1 version.

Workarounds

N/A

References

• https://github.com/kitabisa/teler/commit/ec6082049dba9e44a21f35fb7b123d42ce1a1a7e

For more information

If you have any questions or comments about this advisory:

• Open an issue in Issues Section
• Email us at [email protected]

Permalink: https://github.com/advisories/GHSA-jhj6-5mh6-4pvf
JSON: https://advisories.ecosyste.ms/api/v1/advisories/MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLWpoajYtNW1oNi00cHZm
Source: GitHub Advisory Database
Origin: Unspecified
Severity: Moderate
Classification: General
Published: about 2 years ago
Updated: 4 months ago

CVSS Score: 7.5
CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Identifiers: GHSA-jhj6-5mh6-4pvf, CVE-2020-26213
References:

• https://github.com/kitabisa/teler/security/advisories/GHSA-jhj6-5mh6-4pvf
• https://github.com/kitabisa/teler/commit/ec6082049dba9e44a21f35fb7b123d42ce1a1a7e
• https://nvd.nist.gov/vuln/detail/CVE-2020-26213
• https://github.com/advisories/GHSA-jhj6-5mh6-4pvf

Affected Packages