COVIDSafe-CVE-2020-12856

COVIDSafe-CVE-2020-12856: 블루투스 기반 접촉 추적 앱의 무음 페어링 문제 저자: Jim Mussared George Robotics, Alwen Tiu 호주국립대학교 호주 COVIDSafe v1.0.17 이하 접촉 추적 앱의 Android 버전 구현에서 취약점이 확인되었으며, 이는 싱가포르의 TraceTogether, 앨버타의 ABTraceTogether 등 유사한 아키텍처를 공유하는 여러 다른 접촉 추적 앱에도 영향을 미칠 수 있습니다. 이 문제는 CVE ID CVE-2020-12856로 추적됩니다. 이...

CVE-2020-14292

CVE-2020-14292: COVIDSafe 앱의 블루투스 전송Bluetooth Transport 문제 작성자: Alwen Tiu, 호주국립대학교The Australian National University 최종 업데이트: 2020-09-08 요약 Android용 COVIDSafe 앱 1.0.21 이하 버전에서 GATT 연결 시 블루투스 전송 옵션을 안전하지 않게 사용하여, 공격자가 앱을 속여 블루투스 BR/EDR 전송 방식으로 연결을 설정하게 할 수 있으며, 이를 통해 사용자 동의 없이 피해자 휴대폰의 공개 블루투스 주소가...

covidsafe-CVE-2020-12717-exploit

이 저장소에는 README가 없습니다...

CVE-2020-12857

Caching of GATT characteristic values TempID in COVIDSafe v1.0.15 and v1.0.16 allows a remote attacker to long-term re-identify an Android device running COVIDSafe...

CVE-2020-12860

COVIDSafe through v1.0.17 allows a remote attacker to access phone name and model information because a BLE device can have four roles and COVIDSafe uses all of them. This allows for re-identification of a device, and potentially identification of the owner's name...

CVE-2020-12717

The COVIDSafe Australia app 1.0 and 1.1 for iOS allows a remote attacker to crash the app, and consequently interfere with COVID-19 contact tracing, via a Bluetooth advertisement containing manufacturer data that is too short. This occurs because of an erroneous OpenTrace manuData.subdata call. T...

CVE-2020-12858

Non-reinitialisation of random data in the advertising payload in COVIDSafe v1.0.15 and v1.0.16 allows a remote attacker to re-identify Android devices running COVIDSafe by scanning for their advertising beacons...

EUVD-2020-5139

Malware in sbrugna...

EUVD-2020-5005

Malware in sbrugna...

EUVD-2020-5140

Malware in sbrugna...

EUVD-2020-5141

Malware in sbrugna...

EUVD-2020-5142

Malware in sbrugna...

EUVD-2020-6445

Malware in sbrugna...

CVE-2020-14292

In the COVIDSafe application through 1.0.21 for Android, unsafe use of the Bluetooth transport option in the GATT connection allows attackers to trick the application into establishing a connection over Bluetooth BR/EDR transport, which reveals the public Bluetooth address of the victim's phone...

Google Android has an unspecified vulnerability

Android is a Linux-based open source operating system from Google and the Open Handset Alliance OHA.Bluetooth BR/EDR is a Bluetooth BR/EDR Basic Rate/Enhanced Data Rate standard from Google and the Open Handset Alliance OHA. COVIDSafe app is a coronavirus contact tracing application from Google a...

CVE-2020-14292

In the COVIDSafe application through 1.0.21 for Android, unsafe use of the Bluetooth transport option in the GATT connection allows attackers to trick the application into establishing a connection over Bluetooth BR/EDR transport, which reveals the public Bluetooth address of the victim's phone...

Code injection

In the COVIDSafe application through 1.0.21 for Android, unsafe use of the Bluetooth transport option in the GATT connection allows attackers to trick the application into establishing a connection over Bluetooth BR/EDR transport, which reveals the public Bluetooth address of the victim's phone...

CVE-2020-14292

In the COVIDSafe application through 1.0.21 for Android, unsafe use of the Bluetooth transport option in the GATT connection allows attackers to trick the application into establishing a connection over Bluetooth BR/EDR transport, which reveals the public Bluetooth address of the victim's phone...

CVE-2020-14292

CVE-2020-14292 affects the COVIDSafe app for Android up to version 1.0.21. The vulnerability stems from unsafe use of the Bluetooth transport option in the GATT connection, which can be coerced to establish a connection over Bluetooth BR/EDR. This allows an attacker to obtain the victim’s public ...

COVIDSafe app information disclosure vulnerability (CNVD-2020-30665)

COVIDSafe app is an Australian coronavirus contact tracing app. An information disclosure vulnerability exists in the COVIDSafe app. The vulnerability stems from errors such as configuration during operation of a networked system or product. An attacker could exploit the vulnerability to obtain...