A vulnerability dubbed HollowByte allows unauthenticated attackers to trigger a denial-of-service (DoS) condition on OpenSSL servers with a malicious payload of just 11 bytes. [...]
HollowByte DDoS flaw bloats OpenSSL server memory with 11-byte payload
Summary + source link. No paywalls, no tracking.