CVE-2017-8314: Debian Linux

Medium severity, CVSS 5.5. EPSS: 2.5% chance of exploitation in the next 30 days.

Directory Traversal in Zip Extraction built-in function in Kodi 17.1 and earlier allows arbitrary file write on disk via a Zip file as subtitles.

Affected products

• Debian Debian Linux: version 7.0 only
• Kodi Kodi: up to and including 17.1

Published 2017-05-23. Last modified 2026-06-17.