CVE-2017-8314: Path Traversal
Published May 23, 2017
·Updated
Directory Traversal in Zip Extraction built-in function in Kodi 17.1 and earlier allows arbitrary file write on disk via a Zip file as subtitles.
Affected Software
2 affected components
Kodi Kodi<=17.1
Debian Debian Linux=7.0
Remediation
Patch Available
Event History
May 23, 2017
CVE Published
via MITRE·09:00 PM
Data Sourced
via MITRE·09:00 PM
DescriptionWeakness
Frequently Asked Questions
1
What is the severity of CVE-2017-8314?
The severity of CVE-2017-8314 is classified as medium with a CVSS score of 5.5.
2
How do I fix CVE-2017-8314?
To fix CVE-2017-8314, it is recommended to apply the available patch provided by the Kodi development team.
3
What type of vulnerability is CVE-2017-8314?
CVE-2017-8314 is a directory traversal vulnerability that allows arbitrary file write on disk via a Zip file.
4
Which versions of Kodi are affected by CVE-2017-8314?
CVE-2017-8314 affects Kodi 17.1 and earlier versions.
5
What impact does CVE-2017-8314 have on users?
CVE-2017-8314 can lead to potential unauthorized file manipulation on the user's disk when exploiting the vulnerability.