mozilla/sccache · Security
sccache vulnerable to privilege escalation if server is run as root
- GHSA ID
- GHSA-x7fr-pg8f-93f5
- CVE ID
- CVE-2023-1521
- Severity
- high
- Published
- Updated
- CVSS
- 8.4 · CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- CVSS v3
- 8.4 · CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- CVSS v4
- 7.3 · CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P
Description
Impact
On Linux the sccache client can execute arbitrary code with the privileges of a local sccache server, by preloading the code in a shared library passed to LD_PRELOAD.
If the server is run as root (which is the default when installing the snap package), this means a user running the sccache client can get root privileges.
Patches
Upgrade to 0.4.0
Workarounds
Don't run sccache server as root.
GitHub Security Lab number
GHSL-2023-046
CWEs
- CWE-426 · Untrusted Search Path