What’s Vulnerable › Vulnerabilities

CVE-2020-26213: Denial of Service in teler

• Severity: high (CVSS 7.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.4% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2020-11-06 · updated 2026-06-17
• Weakness: CWE-476

Description

In teler before version 0.0.1, if you run teler inside a Docker container and encounter `errors.Exit` function, it will cause denial-of-service (`SIGSEGV`) because it doesn't get process ID and process group ID of teler properly to kills. The issue is patched in teler 0.0.1 and 0.0.1-dev5.1.

Affected products

• kitabisa teler: before 0.0.1 — fixed in 0.0.1

How to fix

Upgrade to a fixed version: kitabisa teler 0.0.1. Check the vendor advisory for mitigations.

References

• https://github.com/kitabisa/teler/commit/ec6082049dba9e44a21f35fb7b123d42ce1a1a7e
• https://github.com/kitabisa/teler/security/advisories/GHSA-jhj6-5mh6-4pvf
• https://github.com/kitabisa/teler/commit/ec6082049dba9e44a21f35fb7b123d42ce1a1a7e
• https://github.com/kitabisa/teler/security/advisories/GHSA-jhj6-5mh6-4pvf

Get alerted when CVE-2020-26213 or the next vulnerability affects your stack