sccache (SUSE:Linux Enterprise Module for Development Tools 15 SP5) — known CVEs & security advisories

Known CVE vulnerabilities and GitHub Security Advisories affecting the SUSE:Linux Enterprise Module for Development Tools 15 SP5 package sccache, with affected version ranges, CVSS severity, EPSS exploit prediction, and CISA KEV status.

CVEs (4)

• CVE-2021-45710 — CVSS 8.1 (high): An issue was discovered in the tokio crate before 1.8.4, and 1.9.x through 1.13.x before 1.13.1, for Rust. In certain circumstances…
• CVE-2023-1521 — CVSS 7.8 (high): On Linux the sccache client can execute arbitrary code with the privileges of a local sccache server, by preloading the code in a shared…
• CVE-2022-24713 — CVSS 7.5 (high): regex is an implementation of regular expressions for the Rust language. The regex crate features built-in mitigations to prevent denial of…
• CVE-2022-31394 — CVSS 7.5 (high): Hyperium Hyper before 0.14.19 does not allow for customization of the max_header_list_size method in the H2 third-party software, allowing…