Skip to content
The Nexus
DossierENTITY

HollowByte

Coverage of HollowByte in the Nexus archive.

Earliest in view: Jul 17 · 20:20 UTCMost recent: Jul 17 · 20:20 UTC
Co-mentioned in this coverage
OpenSSLtopic1Oktaorganization1glibc systemstopic1TLStopic1
Recent coverage
  • SECURITYJul 17 · 20:20 UTCTHE HACKER NEWS
    OpenSSL HollowByte Flaw Could Freeze Server Memory with 11-Byte TLS Requests

    An OpenSSL vulnerability named HollowByte allows 11-byte TLS requests to allocate up to 131 KB of server memory that remains reserved until the process restarts. Okta's Red Team discovered and reported the denial-of-service bug, which was patched in June without a CVE identifier, security advisory, or changelog entry.

HollowByte · Dossier · The Nexus