COVIDSafe-CVE-2020-12856

COVIDSafe-CVE-2020-12856: Bluetoothベースの接触追跡アプリにおけるサイレントペアリングの問題 著者: Jim Mussared George Robotics, Alwen Tiu オーストラリア国立大学 オーストラリアのCOVIDSafe v1.0.17以前 のAndroid版接触追跡アプリの実装において、シンガポールのTraceTogetherやアルバータ州のABTraceTogetherなど、類似のアーキテクチャを共有する他のいくつかの接触追跡アプリにも影響を与える可能性のある脆弱性が特定されました。この問題はCVE ID CVE-2020-128...

CVE-2020-14292

CVE-2020-14292: COVIDSafeアプリにおけるBluetoothトランスポートの問題 著者: Alwen Tiu, オーストラリア国立大学 最終更新: 2020-09-08 概要 Android版COVIDSafeアプリ（バージョン1.0.21まで）において、GATT接続におけるBluetoothトランスポートオプションの安全でない使用により、攻撃者がアプリを騙してBluetooth...

covidsafe-CVE-2020-12717-exploit

このリポジトリには README がありません。...

CVE-2020-12857

Caching of GATT characteristic values TempID in COVIDSafe v1.0.15 and v1.0.16 allows a remote attacker to long-term re-identify an Android device running COVIDSafe...

CVE-2020-12860

COVIDSafe through v1.0.17 allows a remote attacker to access phone name and model information because a BLE device can have four roles and COVIDSafe uses all of them. This allows for re-identification of a device, and potentially identification of the owner's name...

CVE-2020-12717

The COVIDSafe Australia app 1.0 and 1.1 for iOS allows a remote attacker to crash the app, and consequently interfere with COVID-19 contact tracing, via a Bluetooth advertisement containing manufacturer data that is too short. This occurs because of an erroneous OpenTrace manuData.subdata call. T...

CVE-2020-12858

Non-reinitialisation of random data in the advertising payload in COVIDSafe v1.0.15 and v1.0.16 allows a remote attacker to re-identify Android devices running COVIDSafe by scanning for their advertising beacons...

EUVD-2020-5139

Malware in sbrugna...

EUVD-2020-5140

Malware in sbrugna...

EUVD-2020-5142

Malware in sbrugna...

EUVD-2020-5005

Malware in sbrugna...

EUVD-2020-5141

Malware in sbrugna...

EUVD-2020-6445

Malware in sbrugna...

CVE-2020-14292

In the COVIDSafe application through 1.0.21 for Android, unsafe use of the Bluetooth transport option in the GATT connection allows attackers to trick the application into establishing a connection over Bluetooth BR/EDR transport, which reveals the public Bluetooth address of the victim's phone...

Google Android has an unspecified vulnerability

Android is a Linux-based open source operating system from Google and the Open Handset Alliance OHA.Bluetooth BR/EDR is a Bluetooth BR/EDR Basic Rate/Enhanced Data Rate standard from Google and the Open Handset Alliance OHA. COVIDSafe app is a coronavirus contact tracing application from Google a...

CVE-2020-14292

In the COVIDSafe application through 1.0.21 for Android, unsafe use of the Bluetooth transport option in the GATT connection allows attackers to trick the application into establishing a connection over Bluetooth BR/EDR transport, which reveals the public Bluetooth address of the victim's phone...

Code injection

In the COVIDSafe application through 1.0.21 for Android, unsafe use of the Bluetooth transport option in the GATT connection allows attackers to trick the application into establishing a connection over Bluetooth BR/EDR transport, which reveals the public Bluetooth address of the victim's phone...

CVE-2020-14292

In the COVIDSafe application through 1.0.21 for Android, unsafe use of the Bluetooth transport option in the GATT connection allows attackers to trick the application into establishing a connection over Bluetooth BR/EDR transport, which reveals the public Bluetooth address of the victim's phone...

CVE-2020-14292

CVE-2020-14292 affects the COVIDSafe app for Android up to version 1.0.21. The vulnerability stems from unsafe use of the Bluetooth transport option in the GATT connection, which can be coerced to establish a connection over Bluetooth BR/EDR. This allows an attacker to obtain the victim’s public ...

COVIDSafe app information disclosure vulnerability (CNVD-2020-30665)

COVIDSafe app is an Australian coronavirus contact tracing app. An information disclosure vulnerability exists in the COVIDSafe app. The vulnerability stems from errors such as configuration during operation of a networked system or product. An attacker could exploit the vulnerability to obtain...