dotnet · CoreWCF.UnixDomainSocketHeads-up
CoreWCF.UnixDomainSocket: Race condition in peer identity resolution
Race condition in POSIX peer identity resolution may attribute one connection’s identity to another (getpwuid/getgrgid non-reentrant) and may crash the host pro
What changed
Race condition in POSIX peer identity resolution may attribute one connection’s identity to another (getpwuid/getgrgid non-reentrant) and may crash the host process under contention.
Who it affects
Users of CoreWCF Unix Domain Socket on POSIX systems, especially those relying on peer identity resolution.
What to do today
Upgrade to CoreWCF v1.8.1 or v1.9.1, or restrict UDS filesystem permissions to trusted users as a workaround.
The trail
Collected→
Audited→
Written→
Published