CVE-2017-20186

CVE-2017-20186 is a denial-of-service vulnerability affecting nikooo777 ckSurf versions up to 1.19.2. Specifically, it resides in the SpecListMenuDead function within the Spectator List Name Handler component, where manipulating the 'cleanName' argument can lead to a denial of service. This vulnerability is rated as High severity with a CVSS score of 7.5, indicating it can be exploited remotely without authentication or user interaction, resulting in a complete loss of availability. While no active exploitation or public exploit code has been identified, and community discussion is minimal, upgrading to ckSurf version 1.21.0 is recommended to mitigate the risk. It is important to note that this vulnerability affects an unsupported product.