PatchTheCVEcovidsafe vulnerabilities and fixes
Recent CVEs affecting covidsafe, with upgrade or downgrade steps. 7 tracked.
covidsafe has 7 tracked vulnerabilities, 1 critical. A fixed release or vendor patch exists for 6. Most recent: 2020-09-09. Highest priority: CVE-2020-12856 (score 62/100).
- CVE-2020-14292 MEDIUM 5.7 UPGRADE In the COVIDSafe application through 1.0.21 for Android, unsafe use of the Bluetooth transport option in the G
- CVE-2020-12860 MEDIUM 5.3 UPGRADE MITIGATE COVIDSafe through v1.0.17 allows a remote attacker to access phone name and model information because a BLE de
- CVE-2020-12859 MEDIUM 5.3 UPGRADE Unnecessary fields in the OpenTrace/BlueTrace protocol in COVIDSafe through v1.0.17 allow a remote attacker to
- CVE-2020-12858 HIGH 7.5 UPGRADE Non-reinitialisation of random data in the advertising payload in COVIDSafe v1.0.15 and v1.0.16 allows a remot
- CVE-2020-12857 HIGH 7.5 UPGRADE Caching of GATT characteristic values (TempID) in COVIDSafe v1.0.15 and v1.0.16 allows a remote attacker to lo
- CVE-2020-12856 CRITICAL 9.8 MITIGATE MITIGATE OpenTrace, as used in COVIDSafe through v1.0.17, TraceTogether, ABTraceTogether, and other applications on iOS
- CVE-2020-12717 MEDIUM 6.5 MITIGATE MITIGATE The COVIDSafe (Australia) app 1.0 and 1.1 for iOS allows a remote attacker to crash the app, and consequently
FAQ
How do I fix covidsafe vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is covidsafe being exploited right now?
None of the tracked covidsafe CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which covidsafe CVE should I patch first?
CVE-2020-12856 currently ranks highest (62/100): OpenTrace, as used in COVIDSafe through v1.0.17, TraceTogether, ABTraceTogether, and other applications on iOS.