Denial-of-Service within Docker container

高 7.5CVE-2020-26213 · GHSA-jhj6-5mh6-4pvf · GO-2022-0903 · 06/11/2020 公開 · 17/06/2026 更新

要点

CVE-2020-26213 は ktbs.dev/teler, teler (teler project) に影響する深刻度「高」 (CVSS 7.5) の脆弱性です。
今後30日間に悪用される確率（EPSS）：1.4%（全脆弱性の 73.1% より高い）。
対処：0.0.1 以降に更新してください。

パッケージ	影響を受けるバージョン	修正済みバージョン
ktbs.dev/teler Go	`< 0.0.1`	`0.0.1`
teler teler_project	`< 0.0.1`	`0.0.1`

概要

Impact

If you run teler inside a Docker container and encounter errors.Exit function, it will cause denial-of-service (SIGSEGV) because it doesn't get process ID and process group ID of teler properly to kills.

Specific Go Packages Affected

ktbs.dev/teler/pkg/errors

Patches

Upgrade to the >= 0.0.1 version.

Workarounds

N/A

References

https://github.com/kitabisa/teler/commit/ec6082049dba9e44a21f35fb7b123d42ce1a1a7e

For more information

If you have any questions or comments about this advisory:

Open an issue in Issues Section
Email us at [email protected]

NVD の説明

In teler before version 0.0.1, if you run teler inside a Docker container and encounter `errors.Exit` function, it will cause denial-of-service (`SIGSEGV`) because it doesn't get process ID and process group ID of teler properly to kills. The issue is patched in teler 0.0.1 and 0.0.1-dev5.1.