11-byte HollowByte payload inflates OpenSSL memory, crashing servers
Researchers discovered HollowByte, a DoS flaw where an unauthenticated attacker sends an 11-byte TLS packet with a forged length header, causing OpenSSL to allocate massive buffers and fragment the heap. The memory bloat persists until the process restarts, so updating to the silently released patch is critical for any service using OpenSSL.