CVE-2017-20186

nikooo777 ckSurf Spectator List Name misc.sp SpecListMenuDead denial of service

Description

** UNSUPPORTED WHEN ASSIGNED ** A vulnerability was found in nikooo777 ckSurf up to 1.19.2. It has been declared as problematic. This vulnerability affects the function SpecListMenuDead of the file csgo/addons/sourcemod/scripting/ckSurf/misc.sp of the component Spectator List Name Handler. The manipulation of the argument cleanName leads to denial of service. Upgrading to version 1.21.0 is able to address this issue. The name of the patch is fd6318d99083a06363091441a0614bd2f21068e6. It is recommended to upgrade the affected component. The identifier of this vulnerability is VDB-238156. NOTE: This vulnerability only affects products that are no longer supported by the maintainer.

Category

3.5
CVSS
Severity: Low
CVSS 3.1 •
CVSS 2.0 •
EPSS 0.05%
Third-Party Advisory alliedmods.net Third-Party Advisory vuldb.com Third-Party Advisory vuldb.com
Affected: nikooo777 ckSurf
Published at:
Updated at:

References

Link Tags
https://vuldb.com/?id.238156 technical description third party advisory vdb entry
https://vuldb.com/?ctiid.238156 signature permissions required third party advisory
https://forums.alliedmods.net/showthread.php?t=297179 related third party advisory issue tracking
https://github.com/nikooo777/ckSurf/commit/fd6318d99083a06363091441a0614bd2f21068e6 patch
https://github.com/nikooo777/ckSurf/releases/tag/1.21.0 patch release notes

Frequently Asked Questions

What is the severity of CVE-2017-20186?
CVE-2017-20186 has been scored as a low severity vulnerability.
How to fix CVE-2017-20186?
To fix CVE-2017-20186, make sure you are using an up-to-date version of the affected component(s) by checking the vendor release notes. As for now, there are no other specific guidelines available.
Is CVE-2017-20186 being actively exploited in the wild?
As for now, there are no information to confirm that CVE-2017-20186 is being actively exploited. According to its EPSS score, there is a ~0% probability that this vulnerability will be exploited by malicious actors in the next 30 days.
What software or system is affected by CVE-2017-20186?
CVE-2017-20186 affects nikooo777 ckSurf.
This platform uses data from the NIST NVD, MITRE CVE, MITRE CWE, First.org and CISA KEV but is not endorsed or certified by these entities. CVE is a registred trademark of the MITRE Corporation and the authoritative source of CVE content is MITRE's CVE web site. CWE is a registred trademark of the MITRE Corporation and the authoritative source of CWE content is MITRE's CWE web site.
© 2025 Under My Watch. All Rights Reserved.