OpenSSL Hollow Byte Flaw Could Freeze Server Memory with 11-Byte TLS Requests
Okta's Red Team reported a denial-of-service flaw it named HollowByte, in which an 11-byte TLS request makes an unpatched OpenSSL server allocate up to 131 KB for a message body that never arrives, and on glibc systems that memory stays held until the...