NVD Vulnerability Detail

CVE-2017-20186

Summary	UNSUPPORTED WHEN ASSIGNED A vulnerability was found in nikooo777 ckSurf up to 1.19.2. It has been declared as problematic. This vulnerability affects the function SpecListMenuDead of the file csgo/addons/sourcemod/scripting/ckSurf/misc.sp of the component Spectator List Name Handler. The manipulation of the argument cleanName leads to denial of service. Upgrading to version 1.21.0 is able to address this issue. The name of the patch is fd6318d99083a06363091441a0614bd2f21068e6. It is recommended to upgrade the affected component. The identifier of this vulnerability is VDB-238156. NOTE: This vulnerability only affects products that are no longer supported by the maintainer.
Publication Date	Aug. 28, 2023, 10:15 p.m.
Registration Date	Aug. 29, 2023, 10 a.m.
Last Update	Nov. 21, 2024, 12:22 p.m.

Affected software configurations

Configuration1		or higher	or less	more than	less than
cpe:2.3:a:nikooo777:cksurf::::::::					1.21.0

Related information, measures and tools

No	URL	タグ
1	https://forums.alliedmods.net/showthread.php?t=297179	Issue Tracking Third Party Advisory
2	https://forums.alliedmods.net/showthread.php?t=297179	Issue Tracking Third Party Advisory
3	https://github.com/nikooo777/ckSurf/commit/fd6318d99083a06363091441a0614bd2f21068e6	Patch
4	https://github.com/nikooo777/ckSurf/commit/fd6318d99083a06363091441a0614bd2f21068e6	Patch
5	https://github.com/nikooo777/ckSurf/releases/tag/1.21.0	Release Notes
6	https://github.com/nikooo777/ckSurf/releases/tag/1.21.0	Release Notes
7	https://vuldb.com/?ctiid.238156	Third Party Advisory
8	https://vuldb.com/?ctiid.238156	Third Party Advisory
9	https://vuldb.com/?id.238156	Third Party Advisory
10	https://vuldb.com/?id.238156	Third Party Advisory

Common Vulnerabilities List

JVN Vulnerability Information

nikooo777 の cksurf におけるリソースの不適切なシャットダウンおよびリリースに関する脆弱性

Title	nikooo777 の cksurf におけるリソースの不適切なシャットダウンおよびリリースに関する脆弱性
Summary	サポート外本件は、サポートされていない製品における脆弱性です。 nikooo777 の cksurf には、リソースの不適切なシャットダウンおよびリリースに関する脆弱性が存在します。
Possible impacts	サービス運用妨害 (DoS) 状態にされる可能性があります。
Solution	ベンダアドバイザリまたはパッチ情報が公開されています。参考情報を参照して適切な対策を実施してください。
Publication Date	Aug. 28, 2023, midnight
Registration Date	Dec. 14, 2023, 2:49 p.m.
Last Update	Dec. 14, 2023, 2:49 p.m.

Affected System

nikooo777

cksurf 1.21.0 未満

CVE (情報セキュリティ共通脆弱性識別子)

No	Name	URL
Common Vulnerabilities and Exposures (CVE)
1	CVE-2017-20186	https://www.cve.org/CVERecord?id=CVE-2017-20186
National Vulnerability Database (NVD)
2	CVE-2017-20186	https://nvd.nist.gov/vuln/detail/CVE-2017-20186

CWE (共通脆弱性タイプ一覧)

No	Name	URL
JVNDB
1	CWE-404	https://cwe.mitre.org/data/definitions/404.html

その他

No	Name	URL
関連文書
1	forums.alliedmods.net (showthread.php?t=297179)	https://forums.alliedmods.net/showthread.php?t=297179
2	github.com (1.21.0)	https://github.com/nikooo777/ckSurf/releases/tag/1.21.0
3	github.com (fd6318d99083a06363091441a0614bd2f21068e6)	https://github.com/nikooo777/ckSurf/commit/fd6318d99083a06363091441a0614bd2f21068e6
4	vuldb.com (ctiid.238156)	https://vuldb.com/?ctiid.238156
5	vuldb.com (id.238156)	https://vuldb.com/?id.238156

Change Log

No	Changed Details	Date of change
1	[2023年12月14日] 掲載	Dec. 14, 2023, 2:48 p.m.