PT-2020-16343 · Teler · Teler

Wisiswant0 · Published 2020-11-06 · Updated 2024-08-21 · CVE-2020-26213

Positive Technologies (AI Summary)

CVSS v3.1

5.9

Medium

Base vector

AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions teler versions prior to 0.0.1

Description The issue causes a denial-of-service (SIGSEGV) when teler is run inside a Docker container and encounters the errors.Exit function. This is because it doesn't get the process ID and process group ID of teler properly to kill.

Recommendations For versions prior to 0.0.1, upgrade to version 0.0.1 or later to resolve the issue. As a temporary workaround, consider avoiding the use of the errors.Exit function when running teler inside a Docker container until a patch is applied.

Fix

NULL Pointer Dereference

Weakness Enumeration

CWE-476

Related Identifiers

CVE-2020-26213

GHSA-JHJ6-5MH6-4PVF

GO-2022-0903

Affected Products

Teler

References · 9

• https://github.com/kitabisa/teler/commit/ec6082049dba9e44a21f35fb7b123d42ce1a1a7e · Patch
• https://osv.dev/vulnerability/GHSA-jhj6-5mh6-4pvf · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2020-26213 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-26213 · Security Note
• https://osv.dev/vulnerability/GO-2022-0903 · Vendor Advisory
• https://github.com/kitabisa/teler/security/advisories/GHSA-jhj6-5mh6-4pvf · Note
• https://github.com/kitabisa/teler · Note
• https://t.me/cvenotify/5703 · Telegram Post
• https://t.me/cibsecurity/15987 · Telegram Post