The vulnerability of the do_update_vps() function in the Avast Business Antivirus for Linux antivirus tool allows attackers to perform spoofing attacks.

The vulnerability of the doupdatevps function in the Avast Business Antivirus for Linux antivirus tool is related to the use of files and directories accessible from external sources. Exploiting this vulnerability could allow attackers to carry out spoofing attacks by manipulating update files...

CVE-2025-4134: Files or Directories Accessible to External Parties

Lack of file validation in doupdatevps in Avast Business Antivirus for Linux 4.5 on Linux allows local user to spoof or tamper with the update file via an unverified file write...