OpenSSL HollowByte Flaw Could Freeze Server Memory with 11-Byte TLS Requests
Okta's Red Team has disclosed a denial-of-service vulnerability in OpenSSL, dubbed HollowByte, that allows an attacker to freeze server memory using 11-byte…
Tag: CVE-2025-66199
CVE-2025-66199: OpenSSL TLS 1.3 Certificate Compression Heap Buffer Overflow
A low-severity vulnerability in OpenSSL's TLS 1.3 certificate compression feature allows a peer-supplied length to grow a heap buffer before validation, potentially…