CVE-2017-20148

CVE-2017-20148 describes a critical privilege escalation vulnerability affecting the Logcheck package on Gentoo, specifically through the logcheck-1.3.23.ebuild. This flaw allows a local attacker, operating as the logcheck user, to gain root privileges due to insecure recursive chown calls. With a CVSS score of 9.8 (Critical), the vulnerability has a low attack complexity and high impact on confidentiality, integrity, and availability. There is currently no evidence of active exploitation, nor are there publicly available exploits in Metasploit, Nuclei, or ExploitDB, and it has received no significant community discussion or media coverage.