CVE-2026-54778

6.2 Moyenne

Publiée le 09/07/2026 à 01:16 · Modifiée le 09/07/2026 à 18:29 · Analyse NVD reportée · Source : security-advisories@github.com

Description

CoreWCF is a port of the service side of Windows Communication Foundation (WCF) to .NET Core. Prior to 1.8.1 and 1.9.1, CoreWCF UnixDomainSocket POSIX peer identity resolution uses non-reentrant getpwuid and getgrgid calls, allowing concurrent connections to attribute one connection's identity to another or crash the host process under contention. This issue is fixed in versions 1.8.1 and 1.9.1.

Traduire en français

Produits concernés

CoreWCF

Scores CVSS

Version	Score	Source	Vecteur
3.1	6.2 Moyenne	security-advisories@github.com	`CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H`

Faiblesses (CWE)

CWE-362
CWE-825

Références

https://github.com/CoreWCF/CoreWCF/commit/a3d95ea4627b818995e92c7def4c016164cacfce
https://github.com/CoreWCF/CoreWCF/commit/b0acb105589b455a095ea5ff49f5191e4eeff791
https://github.com/CoreWCF/CoreWCF/commit/b4867547c94bb088568935d581a55dda18a621e1
https://github.com/CoreWCF/CoreWCF/releases/tag/v1.8.1
https://github.com/CoreWCF/CoreWCF/releases/tag/v1.9.1
https://github.com/CoreWCF/CoreWCF/security/advisories/GHSA-q6v9-43v5-jv9q

Ailleurs

NVD
CVE.org
CIRCL Vulnerability-Lookup
CERT-FR
GitHub Advisories