A potentially devastating flaw in in OpenSSL, which is used to protect and secure millions of websites, has been uncovered by security researchers.