Fluid Attacks Database

Description

A divide by zero issue discovered in Kodi Home Theater Software 19.5 and earlier allows attackers to cause a denial of service via use of crafted mp3 file.

Mitigation

Update Impact

Minimal update. May introduce new vulnerabilities or breaking changes.

Ecosystem	Package	Affected version	Patched versions
debian 11	kodi	=2:19.1+dfsg2-2 \|\| =2:19.1+dfsg2-2+deb11u1 \|\| =2:19.1+dfsg2-2+deb11u1~bpo10+1 \|\| >=0 <2:19.1+dfsg2-2+deb11u2	2:19.1+dfsg2-2+deb11u2
debian 12	kodi	>=0 <2:20.0~rc2+dfsg-2	2:20.0~rc2+dfsg-2
debian 13	kodi	>=0 <2:20.0~rc2+dfsg-2	2:20.0~rc2+dfsg-2
debian 14	kodi	>=0 <2:20.0~rc2+dfsg-2	2:20.0~rc2+dfsg-2

Aliases

1. CVE-2023-302072. NVD-2023-302073. OSV-DEBIAN-2023-302074. OSV-2023-302075. SECURITY-TRACKER-CVE-2023-30207

Does your application use this vulnerable software?

During the free trial, our tools assess your application, identify vulnerabilities, and provide recommendations for their remediation.