Wallbleed
Released25 February 2025; 5 months ago (2025-02-25)
Date discoveredWallbleed v1: 2 October 2021; 3 years ago (2021-10-02);
Wallbleed v2: 6 March 2024; 17 months ago (2024-03-06)
Date patchedWallbleed v1: 1 November 2023; 21 months ago (2023-11-01);
Wallbleed v2: 28 March 2024; 16 months ago (2024-03-28)
Discoverer
Affected softwareThe Great Firewall of China's DNS "Injector 3"
Websitegfw.report/publications/ndss25/en/

Wallbleed is a security bug in the Great Firewall of China's DNS "Injector 3", which is a deployed national wide in China.[1] It was first discovered on October 2, 2021 and publicly disclosed on February 25, 2025.[2] Wallbleed allowed anyone, from arbitrary hosts on the Internet, to reveal up to 125 bytes of the Great Firewall of China's memory by sending a crafted DNS query.[citation needed] Wallbleed afforded a rare insight into the Great Firewall of China's internal architecture and the censor's operational behaviors.[citation needed]

References

edit
  1. ^ Fan, Shencha; Sippe, Jackson; San, Sakamoto; Sheffey, Jade; Fifield, David; Houmansadr, Amir; Wedwards, Elson; Wustrow, Eric (2025). "Wallbleed: A Memory Disclosure Vulnerability in the Great Firewall of China". Network and Distributed System Security (NDSS). The Internet Society. Retrieved 2025-02-28.
  2. ^ Shencha Fan, Jackson Sippe, Sakamoto San, Jade Sheffey, David Fifield, Amir Houmansadr, Elson Wedwards, Eric Wustrow (2025). "Experiment Timeline and Vantage Points". Wallbleed: A Memory Disclosure Vulnerability in the Great Firewall of China. Network and Distributed System Security Symposium (NDSS). Retrieved 2025-02-28.{{cite web}}: CS1 maint: multiple names: authors list (link)