Skip to content
Threat Feed
Subscribe

Product

Sccache (< 0.4.0)

1 brief RSS
high advisory

Arbitrary Code Execution in Mozilla Sccache via LD_PRELOAD

Mozilla Sccache versions prior to 0.4.0 are vulnerable to arbitrary code execution due to improper handling of the LD_PRELOAD environment variable when invoking compilers.

Sccache vulnerability code-execution build-security
2t 1c