A vulnerability dubbed HollowByte allows unauthenticated attackers to trigger a denial-of-service (DoS) condition on OpenSSL servers with a malicious payload of just 11 bytes. [...]
HollowByte DDoS flaw bloats OpenSSL server memory with 11-byte payload
Résumé + lien vers la source. Sans paywall, sans tracking.