GHSA-jhj6-5mh6-4pvf

Suggest an improvement
Source
https://github.com/advisories/GHSA-jhj6-5mh6-4pvf
Import Source
https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2021/05/GHSA-jhj6-5mh6-4pvf/GHSA-jhj6-5mh6-4pvf.json
JSON Data
https://api.osv.dev/v1/vulns/GHSA-jhj6-5mh6-4pvf
Aliases
Related
Published
2021-05-24T17:00:46Z
Modified
2024-08-21T15:58:39.139245Z
Severity
  • 5.9 (Medium) CVSS_V3 - CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H CVSS Calculator
Summary
Denial-of-Service within Docker container
Details

Impact

If you run teler inside a Docker container and encounter errors.Exit function, it will cause denial-of-service (SIGSEGV) because it doesn't get process ID and process group ID of teler properly to kills.

Specific Go Packages Affected

ktbs.dev/teler/pkg/errors

Patches

Upgrade to the >= 0.0.1 version.

Workarounds

N/A

References

  • https://github.com/kitabisa/teler/commit/ec6082049dba9e44a21f35fb7b123d42ce1a1a7e

For more information

If you have any questions or comments about this advisory: * Open an issue in Issues Section * Email us at infosec@kitabisa.com

Database specific 
{
    "nvd_published_at": "2020-11-06T17:15:00Z",
    "severity": "MODERATE",
    "cwe_ids": [
        "CWE-476"
    ],
    "github_reviewed_at": "2021-05-21T22:09:36Z",
    "github_reviewed": true
}
References

Affected packages

Go / ktbs.dev/teler

Package

Name
ktbs.dev/teler
View open source insights on deps.dev
Purl
pkg:golang/ktbs.dev/teler

Affected ranges

Type
SEMVER
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
0.0.1