CVE-2020-29622

Summary

A race condition was addressed with additional validation. This issue is fixed in Security Update 2021-005 Catalina. Mounting a maliciously crafted NFS network share may lead to arbitrary code execution with system privileges.

Affected Software

VendorProductVersion RangeStatus
AppleSecurity Update - Catalinaunspecified < 2021affected

Weaknesses

  • Mounting a maliciously crafted NFS network share may lead to arbitrary code execution with system privileges

ADP Enrichment

CVE Program Container

Additional References

References