OpenSSL HollowByte Flaw Could Freeze Server Memory with 11-Byte TLS Requests
Okta's Red Team has disclosed a denial-of-service vulnerability in OpenSSL, dubbed HollowByte, that allows an attacker to freeze server memory using 11-byte…
Tag: OpenSSL
CVE-2025-66199: OpenSSL TLS 1.3 Certificate Compression Heap Buffer Overflow
A low-severity vulnerability in OpenSSL's TLS 1.3 certificate compression feature allows a peer-supplied length to grow a heap buffer before validation, potentially…
CVE-2026-34183: OpenSSL QUIC PATH_CHALLENGE Unbounded Memory Growth
A moderate-severity vulnerability in OpenSSL's QUIC implementation allows unbounded memory growth via the PATH_CHALLENGE handler, leading to denial of service through memory…
OpenSSL — Cybersecurity company profile
OpenSSL was identified as a relevant cybersecurity entity in recently ingested reporting. This profile is generated so related cyber news, CVEs, malware,…
Study of 281 Free Android VPN Apps Reveals Traffic Leaks, Unencrypted Data, and Tracking
A comprehensive study of 281 popular free Android VPN apps from the Google Play Store, conducted by researchers at the University of…
OpenSSL HollowByte Vulnerability and Fix
OpenSSL versions prior to 4.0.1, 3.6.3, 3.5.7, 3.4.6, and 3.0.21 are vulnerable to HollowByte, a denial-of-service attack that freezes server memory via…
Zimperium Finds Heartbleed-Vulnerable OpenSSL in Free VPN Apps
In October 2025, mobile security firm Zimperium reported that three of roughly 800 free VPN apps tested still bundled a version of…