CVE-2020-29622

2021-10-1913:12:47

apple

www.cve.org

race condition

validation

security update

catalina

nfs

arbitrary code execution

system privileges

EPSS

0.002

Percentile

55.3%

JSON

A race condition was addressed with additional validation. This issue is fixed in Security Update 2021-005 Catalina. Mounting a maliciously crafted NFS network share may lead to arbitrary code execution with system privileges.

CNA Affected

[
  {
    "product": "Security Update - Catalina",
    "vendor": "Apple",
    "versions": [
      {
        "lessThan": "2021",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  }
]

References

support.apple.com/en-us/HT212805

EPSS

0.002

Percentile

55.3%

JSON

Related for CVELIST:CVE-2020-29622