Início
Tendências
Vulnerabilidades
Notícias
Pesquisadores
Por que dbugs?

Redsun82

#33959de 53,640
7.8CVSS total
Vulnerabilidades · 1
PT-2023-17049
7.8
2023-05-30
Sccache · Sccache · CVE-2023-1521
**Name of the Vulnerable Software and Affected Versions** sccache versions prior to 0.4.0 **Description** The sccache client can execute arbitrary code with the privileges of a local sccache server by preloading the code in a shared library passed to `LD PRELOAD`. If the server is run as root, which is the default when installing the snap package, this means a user running the sccache client can get root privileges. **Recommendations** Upgrade to version 0.4.0 As a temporary workaround, do not run the sccache server as root.