DSS flaw reported