Home
Trends
Vulnerabilities
News
Researchers
Why dbugs?

Redsun82

#33609of 53,635
7.8Total CVSS
Vulnerabilities · 1
PT-2023-17049
7.8
2023-05-30
Sccache · Sccache · CVE-2023-1521
**Name of the Vulnerable Software and Affected Versions** sccache versions prior to 0.4.0 **Description** The sccache client can execute arbitrary code with the privileges of a local sccache server by preloading the code in a shared library passed to `LD PRELOAD`. If the server is run as root, which is the default when installing the snap package, this means a user running the sccache client can get root privileges. **Recommendations** Upgrade to version 0.4.0 As a temporary workaround, do not run the sccache server as root.