Hacker News new | ask | show | jobs
Wallbleed: A Memory Disclosure Vulnerability in the Great Firewall of China (gfw.report)
1 points by xorbyte 475 days ago
1 comments

Wallbleed, a buffer over-read vulnerability that existed in the DNS injection subsystem of the Great Firewall of China. Wallbleed caused certain nation-wide censorship middleboxes to reveal up to 125 bytes of their memory when censoring a crafted DNS query. It afforded a rare insight into one of the Great Firewall’s well-known network attacks, namely DNS injection, in terms of its internal architecture and the censor’s operational behaviors.