Fluid Attacks Database

Description

Directory Traversal in Zip Extraction built-in function in Kodi 17.1 and earlier allows arbitrary file write on disk via a Zip file as subtitles.

Mitigation

Update Impact

Minimal update. May introduce new vulnerabilities or breaking changes.

Ecosystem	Package	Affected version	Patched versions
debian 11	kodi	>=0 <2:17.1+dfsg1-3	2:17.1+dfsg1-3
debian 12	kodi	>=0 <2:17.1+dfsg1-3	2:17.1+dfsg1-3
debian 13	kodi	>=0 <2:17.1+dfsg1-3	2:17.1+dfsg1-3
debian 14	kodi	>=0 <2:17.1+dfsg1-3	2:17.1+dfsg1-3

Aliases

Does your application use this vulnerable software?

During the free trial, our tools assess your application, identify vulnerabilities, and provide recommendations for their remediation.