The vulnerability of the kav4fs-control service in the Kaspersky Anti-Virus for Linux File Server antivirus solution allows a hacker to elevate their privileges to root.

The vulnerability of the kav4fs-control service in the Kaspersky Anti-Virus for Linux File Server antivirus solution exists due to insufficient validation of input data during read and write operations for the bootloader. Exploiting this vulnerability allows a malicious actor, operating remotely...

CVE-2017-9811

The kluser is able to interact with the kav4fs-control binary in Kaspersky Anti-Virus for Linux File Server before Maintenance Pack 2 Critical Fix 4 version 8.0.4.312. By abusing the quarantine read and write operations, it is possible to elevate the privileges to root...

CVE-2017-9811: Improper Input Validation

The kluser is able to interact with the kav4fs-control binary in Kaspersky Anti-Virus for Linux File Server before Maintenance Pack 2 Critical Fix 4 version 8.0.4.312. By abusing the quarantine read and write operations, it is possible to elevate the privileges to root...

PT-2017-2844

Name of the Vulnerable Software and Affected Versions Kaspersky Anti-Virus for Linux File Server versions prior to 8.0.4.312 Description The issue exists due to insufficient input validation during quarantine read and write operations in the kav4fs-control service. This can be exploited by a remo...