CVE-2023-30207

MediumCVSS 5.5/10Last modified Jun 17, 2026

Description

A divide by zero issue discovered in Kodi Home Theater Software 19.5 and earlier allows attackers to cause a denial of service via use of crafted mp3 file.

Metrics

CVSS 3.1 5.5/10CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-369

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

https://github.com/xbmc/xbmc/commit/dbc00c500f4c4830049cc040a61c439c580eea73Patch
https://github.com/xbmc/xbmc/issues/22378Exploit, Issue Tracking, Third Party Advisory
https://github.com/xbmc/xbmc/pull/22391Patch
https://lists.debian.org/debian-lts-announce/2024/01/msg00009.html
https://github.com/xbmc/xbmc/commit/dbc00c500f4c4830049cc040a61c439c580eea73Patch
https://github.com/xbmc/xbmc/issues/22378Exploit, Issue Tracking, Third Party Advisory
https://github.com/xbmc/xbmc/pull/22391Patch
https://lists.debian.org/debian-lts-announce/2024/01/msg00009.html

Timeline

Published: Jul 5, 2023
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2023

CVE-2023-30215.4Cross-site Scripting (XSS) - Stored in GitHub repository mkucej/i-librarian-free prior to 5.10.4.CVE-2023-302106.1OURPHP <= 7.2.0 is vulnerable to Cross Site Scripting (XSS) via ourphp_tz.php.CVE-2023-302119.8OURPHP <= 7.2.0 is vulnerable to SQL Injection.CVE-2023-302126.1OURPHP <= 7.2.0 is vulnerale to Cross Site Scripting (XSS) via /client/manage/ourphp_out.php.CVE-2023-302165.4Insecure permissions in the updateUserInfo function of newbee-mall before commit 1f2c2dfy allows attackers to obtain user account informatio CVE-2023-30225.5A flaw was found in the IPv6 module of the Linux kernel. The arg.result was not used consistently in fib6_rule_lookup, sometimes holding rt6 CVE-2023-302227.5An information disclosure vulnerability in 4D SAS 4D Server Application v17, v18, v19 R7 and earlier allows attackers to retrieve password h CVE-2023-302237.5A broken authentication vulnerability in 4D SAS 4D Server software v17, v18, v19 R7, and earlier allows attackers to send crafted TCP packet CVE-2023-302265.5An issue was discovered in function get_gnu_verneed in rizinorg Rizin prior to 0.5.0 verneed_entry allows attackers to cause a denial of ser CVE-2023-30237.2The WP EasyCart plugin for WordPress is vulnerable to time-based SQL Injection via the ‘orderby’ parameter in versions up to, and including,CVE-2023-302377.8CyberGhostVPN Windows Client before v8.3.10.10015 was discovered to contain a DLL injection vulnerability via the component Dashboard.exe.CVE-2023-30246.5Forcing the Bluetooth LE stack to segment 'prepare write response' packets can lead to an out-of-bounds memory access.