> TritonInfoSec News
Home / Jul 18, 2026 / Story
0
#4 The Hacker News general July 17, 2026 at 20:20 UTC

OpenSSL HollowByte Flaw Could Freeze Server Memory with 11-Byte TLS Requests

By [email protected] (The Hacker News)

AI Summary

Okta's Red Team discovered and named 'HollowByte,' a denial-of-service vulnerability in OpenSSL where an 11-byte malicious TLS request causes the server to allocate up to 131 KB of memory that is never freed — confirmed irrecoverable on glibc systems until process restart. OpenSSL shipped the fix in June with no CVE, no advisory, and no changelog reference, meaning administrators have no straightforward way to know if they are patched.

Read full article → https://thehackernews.com/2026/07/openssl-hollowby…

Relevance score: 88.0/100

# More from July 18

  1. 1
    CISA Adds Exploited SharePoint RCE Zero-Day CVE-2026-58644 to KEV The Hacker News
  2. 2
    New wp2shell WordPress Core Flaw Lets Unauthenticated Attackers Run Code The Hacker News
  3. 3
    Inc Ransomware Exploits SonicWall SMA Zero-Days Dark Reading
  4. 5
    Two Scattered Spider Hackers Get 5.5 Years Each for £29 Million TfL Hack The Hacker News
  5. 6
    Coca-Cola Suspends US Fairlife Production Due to Ransomware Attack SecurityWeek
  6. 7
    CISA urges immediate action on actively exploited Fortinet flaws BleepingComputer
  7. 8
    GoldenEyeDog Subgroup Linked to DigiCert Breach and Code-Signing Certificate Theft The Hacker News
  8. 9
    New Windows LegacyHive zero-day gives hackers admin privileges BleepingComputer
  9. 10
    Now, even Russia's most elite hackers are using Clickfix to infect devices Ars Technica Security