OpenSSL versions prior to 4.0.1, 3.6.3, 3.5.7, 3.4.6, and 3.0.21 are vulnerable to HollowByte, a denial-of-service attack that freezes server memory via 11-byte TLS requests. The fix was released without a CVE or advisory.
OpenSSL versions prior to 4.0.1, 3.6.3, 3.5.7, 3.4.6, and 3.0.21 are vulnerable to HollowByte, a denial-of-service attack that freezes server memory via 11-byte TLS requests. The fix was released without a CVE or advisory.