{"id":"CVE-2023-30207","aliases":["DEBIAN-CVE-2023-30207","DLA-3712-1","DLA-4423-1","EUVD-2023-34632","GHSA-v4f4-rq8m-g9pv","UBUNTU-CVE-2023-30207"],"status":"published","title":"A divide by zero issue discovered in Kodi Home Theater Software 19.5 and earlier allows attackers...","description":"A divide by zero issue discovered in Kodi Home Theater Software 19.5 and earlier allows attackers to cause a denial of service via use of crafted mp3 file.","severity":{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-10","score":0.00329,"percentile":0.26244,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-369"],"published":"2023-07-05T00:00:00Z","modified":"2026-10-28T10:32:49Z","fixes":[{"ecosystem":"Debian:12","package":"kodi","fixed_in":["2:20.0~rc2+dfsg-2"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"kodi","fixed_in":["2:20.0~rc2+dfsg-2"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"kodi","fixed_in":["2:20.0~rc2+dfsg-2"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Debian:12","package":"kodi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:20.0~rc2+dfsg-2"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"kodi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:20.0~rc2+dfsg-2"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"kodi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:20.0~rc2+dfsg-2"}]}]},{"source":"osv","ecosystem":"Debian:10","package":"kodi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:17.6+dfsg1-4+deb10u1"}]}],"versions":["2:17.6+dfsg1-4"],"bundled":4},{"source":"osv","ecosystem":"Debian:11","package":"kodi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:19.1+dfsg2-2+deb11u2"}]}],"versions":["2:19.1+dfsg2-2","2:19.1+dfsg2-2+deb11u1","2:19.1+dfsg2-2+deb11u1~bpo10+1"],"bundled":2},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"kodi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["15.1+dfsg1-3","15.2+dfsg1-1build1","15.2+dfsg1-3","15.2+dfsg1-3ubuntu1","15.2+dfsg1-3ubuntu1.1"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"kodi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2:17.3+dfsg1-3","2:17.3+dfsg1-3build1","2:17.3+dfsg1-5","2:17.3+dfsg1-5build1","2:17.3+dfsg1-5build2","2:17.6+dfsg1-1","2:17.6+dfsg1-1build1","2:17.6+dfsg1-1ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"kodi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2:17.6+dfsg1-4ubuntu4","2:17.6+dfsg1-4ubuntu9","2:17.6+dfsg1-4ubuntu10","2:18.5+dfsg1-0ubuntu3","2:18.6+dfsg1-2ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"kodi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2:19.1+dfsg2-2","2:19.3+dfsg1-1","2:19.3+dfsg1-1build2","2:19.3+dfsg1-1build3","2:19.3+dfsg1-1build4","2:19.3+dfsg1-1build5","2:19.4+dfsg1-2"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"kodi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2:20.2+dfsg-4","2:20.2+dfsg-4build1","2:20.2+dfsg-4build2","2:20.2+dfsg-4ubuntu1","2:20.3+dfsg-1","2:20.4+dfsg-1","2:20.5+dfsg-1build2","2:20.5+dfsg-1ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:25.10","package":"kodi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2:21.2+dfsg-1build2","2:21.2+dfsg-4","2:21.2+dfsg-4build1","2:21.2+dfsg-4build2"]},{"source":"osv","ecosystem":"Ubuntu:26.10","package":"kodi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2:21.3+dfsg-1ubuntu1","2:21.3+dfsg-1.2"]},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"kodi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2:21.2+dfsg-4build2","2:21.2+dfsg-4build3","2:21.2+dfsg-5","2:21.3+dfsg-1","2:21.3+dfsg-1build1","2:21.3+dfsg-1ubuntu1"]}],"products":[{"vendor":"kodi","product":"kodi"}],"references":[{"url":"https://github.com/xbmc/xbmc/issues/22378","tags":["x_transferred","Exploit","Issue Tracking","Third Party Advisory","report"]},{"url":"https://github.com/xbmc/xbmc/commit/dbc00c500f4c4830049cc040a61c439c580eea73","tags":["x_transferred","Patch","fix"]},{"url":"https://github.com/xbmc/xbmc/pull/22391","tags":["x_transferred","Patch","fix","report"]},{"url":"https://lists.debian.org/debian-lts-announce/2024/01/msg00009.html","tags":["mailing-list","x_transferred","article"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-30207","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-v4f4-rq8m-g9pv"},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/30xxx/CVE-2023-30207.json","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2023-30207","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2023-30207","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-30207","tags":["report"]}],"sources":{"cve":[{"id":"CVE-2023-30207","description":"A divide by zero issue discovered in Kodi Home Theater Software 19.5 and earlier allows attackers to cause a denial of service via use of crafted mp3 file.","status":"published","published":"2023-07-05T00:00:00Z","modified":"2024-08-02T14:21:44.766Z","updated_at":"2026-11-02T14:35:22.640346Z"}],"euvd":[{"id":"EUVD-2023-34632","description":"A divide by zero issue discovered in Kodi Home Theater Software 19.5 and earlier allows attackers to cause a denial of service via use of crafted mp3 file.","status":"published","published":"2023-07-05T00:00:00Z","modified":"2024-08-02T14:21:44Z","updated_at":"2026-11-03T03:50:05.51254Z"}],"ghsa":[{"id":"GHSA-v4f4-rq8m-g9pv","title":"A divide by zero issue discovered in Kodi Home Theater Software 19.5 and earlier allows attackers...","description":"A divide by zero issue discovered in Kodi Home Theater Software 19.5 and earlier allows attackers to cause a denial of service via use of crafted mp3 file.","status":"published","published":"2023-07-05T21:30:17Z","modified":"2024-01-23T09:30:22Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"cwes":["CWE-369"],"updated_at":"2026-11-02T14:55:28.44427Z"}],"nvd":[{"id":"CVE-2023-30207","description":"A divide by zero issue discovered in Kodi Home Theater Software 19.5 and earlier allows attackers to cause a denial of service via use of crafted mp3 file.","status":"published","published":"2023-07-05T21:15:09.41Z","modified":"2026-06-17T05:54:19.697Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium","assessor":"primary"}],"cwes":["CWE-369"],"updated_at":"2026-11-02T14:08:15.127597Z"}],"osv":[{"id":"DEBIAN-CVE-2023-30207","description":"A divide by zero issue discovered in Kodi Home Theater Software 19.5 and earlier allows attackers to cause a denial of service via use of crafted mp3 file.","status":"published","published":"2023-07-05T21:15:09.41Z","modified":"2026-10-26T18:00:52.979971512Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:45:39.679062Z"},{"id":"UBUNTU-CVE-2023-30207","description":"A divide by zero issue discovered in Kodi Home Theater Software 19.5 and earlier allows attackers to cause a denial of service via use of crafted mp3 file.","status":"published","published":"2023-07-05T21:15:00Z","modified":"2026-10-17T12:56:05.449651451Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T16:54:20.997471Z"},{"id":"CVE-2023-30207","description":"A divide by zero issue discovered in Kodi Home Theater Software 19.5 and earlier allows attackers to cause a denial of service via use of crafted mp3 file.","status":"published","published":"2023-07-05T00:00:00Z","modified":"2026-10-28T10:32:49.77481892Z","updated_at":"2026-11-02T15:44:31.790231Z"},{"id":"DLA-3712-1","title":"kodi - security update","status":"published","published":"2024-01-17T00:00:00Z","modified":"2026-03-09T01:19:43.89816Z","updated_at":"2026-11-02T15:46:12.203458Z"},{"id":"DLA-4423-1","title":"kodi - security update","status":"published","published":"2025-12-28T00:00:00Z","modified":"2025-12-28T19:14:58.632314Z","updated_at":"2026-11-02T15:46:12.7027Z"}]}}