OpenSSL Silently Patches DoS Vulnerability Named HollowByte by Okta

The OpenSSL maintainers silently patched a Denial-of-Service (DoS) vulnerability, which security firm Okta has named HollowByte. The flaw was addressed without prior public disclosure, though no specific technical details, CVE identifier, or affected OpenSSL versions were provided in the report. The vulnerability's impact is limited to DoS conditions, with no mention of remote code execution or privilege escalation risks. The naming of the flaw by Okta suggests external discovery, but the article does not clarify the timeline of disclosure or patch release. No additional technical specifics, such as exploit vectors or mitigation steps, were disclosed.