OpenSSL HollowByte Flaw Could Freeze Server Memory with 11Byte TLS Requests

Eleven bytes will make an unpatched OpenSSL server set aside up to 131 KB of memory for a message that never arrives On the glibc systems Okta tested that memory is gone until the process restarts OpenSSL shipped the HollowByte fix in June with no CVE no advisory and no changelog entry pointing at it Oktas Red Team which reported the denialofservice bug and named it published the