Most recent entries from all

EUVD-2026-204698

fkie_cve-2023-1521

On Linux the sccache client can execute arbitrary code with the privileges of a local sccache server, by preloading the code in a shared library passed to LD_PRELOAD.

If the server is run as root (which is the default when installing the snap package https://snapcraft.io/sccache ), this means a user running the sccache client can get root privileges.

GHSA-x7fr-pg8f-93f5 — sccache vulnerable to privilege escalation if server is run as root

Affected: crates.io: sccache

### Impact

On Linux the `sccache` client can execute arbitrary code with the privileges of a local `sccache` server, by preloading the code in a shared library passed to `LD_PRELOAD`.

If the server is run as root (which is the default when installing the [snap package](https://snapcraft.io/sccache)), this means a user running the `sccache` client can get root privileges.

### Patches Upgrade to 0.4.0

### Workarounds Don't run sccache server as root.

### GitHub Security Lab number

GHSL-2023-046

gsd-2023-1521

SUSE-SU-2023:2637-1 — Security update for sccache

Security update for sccache

UBUNTU-CVE-2023-1521

Affected: Ubuntu:Pro:24.04:LTS: sccache, Ubuntu:25.10: sccache, Ubuntu:26.04:LTS: sccache

On Linux the sccache client can execute arbitrary code with the privileges of a local sccache server, by preloading the code in a shared library passed to LD_PRELOAD. If the server is run as root (which is the default when installing the snap package https://snapcraft.io/sccache ), this means a user running the sccache client can get root privileges.