CVE-2025-4134

Lack of file validation in doupdatevps in Avast Business Antivirus for Linux 4.5 on Linux allows local user to spoof or tamper with the update file via an unverified file write...

CVE-2025-4134

creationtimestamp| type| source ---|---|--- 2025-05-28 15:02:07+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114586060545247216 2025-05-28 15:21:14+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lqaithaqytr2...

CVE-2025-4134

Lack of file validation in doupdatevps in Avast Business Antivirus for Linux 4.5 on Linux allows local user to spoof or tamper with the update file via an unverified file write...

CVE-2025-4134 Lack of file validation in Avast Business Antivirus for Linux allows writing untrusted update files

Lack of file validation in doupdatevps in Avast Business Antivirus for Linux 4.5 on Linux allows local user to spoof or tamper with the update file via an unverified file write...

CVE-2025-4134

Avast Business Antivirus for Linux 4.5 contains a vulnerability in the do_update_vps function that lacks proper file validation, allowing a local user to spoof or tamper with update files via an unverified file write. This is a local-privilege issue with potential impact on update integrity. A pa...