Eleven bytes will make an unpatched OpenSSL server set aside up to 131 KB of memory for a message that never arrives. On the glibc systems Okta tested, that memory…
Source: Read Full Article
OpenSSL HollowByte Flaw Could Freeze Server Memory with 11-Byte TLS Requests
