HAProxy 3.2 before 3.4.6 allows a remote unauthenticated attacker to cause a denial of service (worker-thread CPU exhaustion) via a truncated HTTP/2 PING frame. h2c_handle_ping in src/mux_h2.c does not check for a short read, unlike the oth…

{
                    "defaultStatus": "unaffected",
                    "modules": [
                        "mux-h2"
                    ],
                    "product": "HAProxy",
                    "programFiles": [
                        "src/mux_h2.c"
                    ],
                    "programRoutines": [
                        {
                            "name": "h2c_handle_ping"
                        }
                    ],
                    "repo": "https://git.haproxy.org/git/haproxy.git/",
                    "vendor": "HAProxy",
                    "versions": [
                        {
                            "lessThan": "3.2.26",
                            "status": "affected",
                            "version": "3.2.0",
                            "versionType": "custom"
                        },
                        {
                            "lessThan": "3.3.17",
                            "status": "affected",
                            "version": "3.3.0",
                            "versionType": "custom"
                        },
                        {
                            "lessThan": "3.4.6",
                            "status": "affected",
                            "version": "3.4.0",
                            "versionType": "custom"
                        },
                        {
                            "lessThan": "3.5-dev9",
                            "status": "affected",
                            "version": "3.5-dev",
                            "versionType": "custom"
                        }
                    ]
                }

{
                    "defaultStatus": "unaffected",
                    "product": "HAProxy Enterprise Edition",
                    "vendor": "HAProxy",
                    "versions": [
                        {
                            "lessThan": "3.2r1-378.1259",
                            "status": "affected",
                            "version": "3.2.0r1",
                            "versionType": "custom"
                        },
                        {
                            "lessThan": "3.3r1-377.1005",
                            "status": "affected",
                            "version": "3.3.0r1",
                            "versionType": "custom"
                        }
                    ]
                }

{
                    "defaultStatus": "unaffected",
                    "product": "Kubernetes Ingress Controller",
                    "vendor": "HAProxy",
                    "versions": [
                        {
                            "lessThan": "3.2.17",
                            "status": "affected",
                            "version": "3.2.0",
                            "versionType": "custom"
                        }
                    ]
                }

{
                    "defaultStatus": "unaffected",
                    "product": "Kubernetes Ingress Controller Enterprise",
                    "vendor": "Haproxy",
                    "versions": [
                        {
                            "lessThan": "3.2.17-ee1",
                            "status": "affected",
                            "version": "3.2.0",
                            "versionType": "custom"
                        },
                        {
                            "lessThan": "3.0.16-ee17",
                            "status": "affected",
                            "version": "3.0",
                            "versionType": "custom"
                        },
                        {
                            "lessThan": "1.11.14-ee11",
                            "status": "affected",
                            "version": "1.11",
                            "versionType": "custom"
                        }
                    ]
                }