sccache vulnerable to privilege escalation if server is run as root

Impact On Linux the sccache client can execute arbitrary code with the privileges of a local sccache server, by preloading the code in a shared library passed to LDPRELOAD. If the server is run as root which is the default when installing the snap package, this means a user running the sccache...

PT-2023-17049 · Sccache +2 · Sccache +2

Name of the Vulnerable Software and Affected Versions: sccache versions prior to 0.4.0 Description: The sccache client can execute arbitrary code with the privileges of a local sccache server by preloading the code in a shared library passed to LD PRELOAD. If the server is run as root, which is t...

SUSE SLED15 / SLES15 / openSUSE 15 Security Update : sccache (SUSE-SU-2022:4073-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2022:4073-1 advisory. Updated to version 0.3.0: - CVE-2022-24713: Fixed Regex denial of service bsc1196972. -...

SUSE-SU-2022:4073-1 Security update for sccache

This update for sccache fixes the following issues: Updated to version 0.3.0: - CVE-2022-24713: Fixed Regex denial of service bsc1196972. - CVE-2021-45710: Fixed tokio data race with memory corruption bsc1194119. - Added hardening to systemd services bsc1181400...