CVE-2020-26213: NULL Pointer Dereference

May 24, 2021 (updated October 2, 2023)

In teler before version 0.0.1, if you run teler inside a Docker container and encounter errors.Exit function, it will cause denial-of-service (SIGSEGV) because it does not get process ID and process group ID of teler properly to kills. The issue is patched in teler 0.0.1 and 0.0.1-dev5.1.

References

github.com/advisories/GHSA-jhj6-5mh6-4pvf
github.com/kitabisa/teler/commit/ec6082049dba9e44a21f35fb7b123d42ce1a1a7e
github.com/kitabisa/teler/security/advisories/GHSA-jhj6-5mh6-4pvf
nvd.nist.gov/vuln/detail/CVE-2020-26213

Code Behaviors & Features

Detect and mitigate CVE-2020-26213 with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Dependency Scanning using SBOM also detects vulnerabilities from proprietary advisories that this site does not include. Learn more about Dependency Scanning using SBOM →