PT-2020-20881 · Apple · Apple Macos

Insu_Yun_En + 2 · Published 2020-08-10 · Updated 2020-10-29 · CVE-2020-9939

Positive Technologies (AI Summary)

CVSS v3.1

6.4

Medium

Base vector

AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions macOS versions prior to 10.15.6

Description A local user may be able to load unsigned kernel extensions due to a time-of-check time-of-use memory corruption issue. This could potentially allow for unauthorized kernel extension loading.

Recommendations For versions prior to 10.15.6, update to macOS Catalina 10.15.6 to resolve the issue.

Fix

Time Of Check To Time Of Use

Weakness Enumeration

CWE-367

Related Identifiers

CVE-2020-9939

ZDI-20-960

Affected Products

Apple Macos

References · 4

• https://zerodayinitiative.com/advisories/ZDI-20-960 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2020-9939 · Security Note
• https://support.apple.com/kb/HT211289 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2020-9939 · Vendor Advisory