Denial Of Service (DoS)

github.com/projectcalico/calico is vulnerable to Denial Of Service (DoS). The vulnerability exists because the TLS Handshake() call is executed within the main server handle loop without any timeout mechanism. This means that an incomplete or unclean TLS handshake can potentially block the main loop indefinitely. As a result, other connections will be left idle, waiting for that handshake to complete, ultimately leading to a situation that can crash the application