CVE-2020-12717: The COVIDSafe (Australia) app 1.0 and 1.1 for iOS allows a remote attacker to crash the app, and consequently interfere with COVID-19 contact tracing, via a Bluetooth advertisement containing manuf...

Summary

The COVIDSafe (Australia) app 1.0 and 1.1 for iOS allows a remote attacker to crash the app, and consequently interfere with COVID-19 contact tracing, via a Bluetooth advertisement containing manufacturer data that is too short. This occurs because of an erroneous OpenTrace manuData.subdata call. Th...

What to do

The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.

Affected software

Vendor	Product	Affected versions
alberta	abtracetogether	All versions `cpe:2.3:a:alberta:abtracetogether:-:::::iphone_os::`
gov	protego_safe	All versions `cpe:2.3:a:gov:protego_safe:-:::::iphone_os::`
health	covidsafe	1.0 1.1 `cpe:2.3:a:health:covidsafe:1.0:::::iphone_os::`
tracetogether	tracetogether	All versions `cpe:2.3:a:tracetogether:tracetogether:-:::::iphone_os::`

Original advisory text

The COVIDSafe (Australia) app 1.0 and 1.1 for iOS allows a remote attacker to crash the app, and consequently interfere with COVID-19 contact tracing, via a Bluetooth advertisement containing manuf...

The COVIDSafe (Australia) app 1.0 and 1.1 for iOS allows a remote attacker to crash the app, and consequently interfere with COVID-19 contact tracing, via a Bluetooth advertisement containing manufacturer data that is too short. This occurs because of an erroneous OpenTrace manuData.subdata call. The ABTraceTogether (Alberta), ProteGO (Poland), and TraceTogether (Singapore) apps were also affected.

References

https://medium.com/%40wabz/covidsafe-ios-vulnerability-cve-2020-12717-30dc003f97...