67 matches found
CVE-2020-12717
The COVIDSafe Australia app 1.0 and 1.1 for iOS allows a remote attacker to crash the app, and consequently interfere with COVID-19 contact tracing, via a Bluetooth advertisement containing manufacturer data that is too short. This occurs because of an erroneous OpenTrace manuData.subdata call. T...
Code injection
The COVIDSafe Australia app 1.0 and 1.1 for iOS allows a remote attacker to crash the app, and consequently interfere with COVID-19 contact tracing, via a Bluetooth advertisement containing manufacturer data that is too short. This occurs because of an erroneous OpenTrace manuData.subdata call. T...
CVE-2020-12717
The COVIDSafe Australia app 1.0 and 1.1 for iOS allows a remote attacker to crash the app, and consequently interfere with COVID-19 contact tracing, via a Bluetooth advertisement containing manufacturer data that is too short. This occurs because of an erroneous OpenTrace manuData.subdata call. T...
CVE-2020-12717
The COVIDSafe Australia app 1.0 and 1.1 for iOS allows a remote attacker to crash the app, and consequently interfere with COVID-19 contact tracing, via a Bluetooth advertisement containing manufacturer data that is too short. This occurs because of an erroneous OpenTrace manuData.subdata call. T...
CVE-2020-12717
The CVE-2020-12717 entry concerns the COVIDSafe iOS apps (Australia) versions 1.0 and 1.1, with additional impact cited on AB TraceTogether, ProteGO, and TraceTogether. The issue stems from an erroneous subroutine call (OpenTrace manuData.subdata) when processing Bluetooth manufacturer data that ...
PT-2020-13225
Name of the Vulnerable Software and Affected Versions COVIDSafe versions 1.0 through 1.1 ABTraceTogether affected versions not specified ProteGO affected versions not specified TraceTogether affected versions not specified Description The issue allows a remote attacker to crash the app via a...
CVE-2020-12717: Undefined Security Weakness
The COVIDSafe Australia app 1.0 and 1.1 for iOS allows a remote attacker to crash the app, and consequently interfere with COVID-19 contact tracing, via a Bluetooth advertisement containing manufacturer data that is too short. This occurs because of an erroneous OpenTrace manuData.subdata call. T...