CVE-2023-1521

On Linux the sccache client can execute arbitrary code with the privileges of a local sccache server, by preloading the code in a shared library passed to LDPRELOAD. If the server is run as root which is the default when installing the snap package https://snapcraft.io/sccache , this means a user...

CVE-2023-1521: Untrusted Search Path

On Linux the sccache client can execute arbitrary code with the privileges of a local sccache server, by preloading the code in a shared library passed to LDPRELOAD. If the server is run as root which is the default when installing the snap package https://snapcraft.io/sccache , this means a user...

GHSA-Q445-7M23-QRMW vulnerabilities

Vulnerabilities for packages: zed, rustup, lychee, pixi, sdp-k8s-injector, berg, sccache...

OPENSUSE-SU-2024:13961-1 sccache-0.8.0~3-1.1 on GA media

These are all security issues fixed in the sccache-0.8.03-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:11923-1 sccache-0.2.15~git0.6b6d2f7-11.1 on GA media

These are all security issues fixed in the sccache-0.2.15git0.6b6d2f7-11.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:12728-1 sccache-0.4.0pre.7~0-2.1 on GA media

These are all security issues fixed in the sccache-0.4.0pre.70-2.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:11716-1 sccache-0.2.15~git0.6b6d2f7-8.1 on GA media

These are all security issues fixed in the sccache-0.2.15git0.6b6d2f7-8.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:12862-1 sccache-0.4.1~18-2.1 on GA media

These are all security issues fixed in the sccache-0.4.118-2.1 package on the GA media of openSUSE Tumbleweed...

openSUSE: Security Advisory for sccache (SUSE-SU-2023:2637-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

openSUSE: Security Advisory for sccache (SUSE-SU-2023:3526-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Exploit for CVE-2023-1521

PoC bash gcc -sha...

SUSE-SU-2023:3526-1 Security update for sccache

This update for sccache fixes the following issues: - Update to version 0.4.2. - CVE-2021-45710: Fixed a segmentation fault due to data race in tokio crate. bsc1194119 - CVE-2022-24713: Fixed a ReDoS issue due to vulnerable regex crate. bsc1196972 - CVE-2022-31394: Fixed a DoS issue due to the ma...

SUSE-SU-2023:2637-1 Security update for sccache

This update for sccache fixes the following issues: - CVE-2023-1521: Fixed possible code injection via LDPRELOAD to sccache server bsc1212407. - CVE-2022-31394: Fixed a denial-of-service vulnerability via header list size bsc1208553...

SUSE CVE-2023-1521

On Linux the sccache client can execute arbitrary code with the privileges of a local sccache server, by preloading the code in a shared library passed to LDPRELOAD. If the server is run as root which is the default when installing the snap package https://snapcraft.io/sccache , this means a user...

sccache vulnerable to privilege escalation if server is run as root

Impact On Linux the sccache client can execute arbitrary code with the privileges of a local sccache server, by preloading the code in a shared library passed to LDPRELOAD. If the server is run as root which is the default when installing the snap package, this means a user running the sccache...

GHSA-X7FR-PG8F-93F5 sccache vulnerable to privilege escalation if server is run as root

Impact On Linux the sccache client can execute arbitrary code with the privileges of a local sccache server, by preloading the code in a shared library passed to LDPRELOAD. If the server is run as root which is the default when installing the snap package, this means a user running the sccache...

PT-2023-17049

Name of the Vulnerable Software and Affected Versions sccache versions prior to 0.4.0 Description The sccache client can execute arbitrary code with the privileges of a local sccache server by preloading the code in a shared library passed to LD PRELOAD. If the server is run as root, which is the...

SUSE SLED15 / SLES15 / openSUSE 15 Security Update : sccache (SUSE-SU-2022:4073-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2022:4073-1 advisory. Updated to version 0.3.0: - CVE-2022-24713: Fixed Regex denial of service bsc1196972. -...

SUSE-SU-2022:4073-1 Security update for sccache

This update for sccache fixes the following issues: Updated to version 0.3.0: - CVE-2022-24713: Fixed Regex denial of service bsc1196972. - CVE-2021-45710: Fixed tokio data race with memory corruption bsc1194119. - Added hardening to systemd services bsc1181400...