CVE-2017-9811: Input Validation
The kluser is able to interact with the kav4fs-control binary in Kaspersky Anti-Virus for Linux File Server before Maintenance Pack 2 Critical Fix 4 (version 8.0.4.312). By abusing the quarantine read and write operations, it is possible to elevate the privileges to root.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2017-9811?
CVE-2017-9811 is considered a high severity vulnerability due to its potential for privilege escalation to root.
How do I fix CVE-2017-9811?
To mitigate CVE-2017-9811, update Kaspersky Anti-Virus for Linux File Server to version 8.0.4.312 or later.
What is the impact of CVE-2017-9811 on Kaspersky Anti-Virus for Linux File Server?
The impact of CVE-2017-9811 allows an attacker to escalate privileges, potentially compromising the entire system.
Which versions of Kaspersky Anti-Virus for Linux File Server are affected by CVE-2017-9811?
CVE-2017-9811 affects Kaspersky Anti-Virus for Linux File Server versions up to and including 8.0.3.297.
Can CVE-2017-9811 be exploited remotely?
CVE-2017-9811 requires local access to exploit, as it involves interaction with the kav4fs-control binary.