HAProxy 3 before 3.4.6 allows a remote unauthenticated attacker to cause a denial of service (persistent worker-thread CPU exhaustion) via an HTTP/1.1 chunked request. Although the H1 multiplexer drains the request before closing the stream…

{
                    "defaultStatus": "unaffected",
                    "modules": [
                        "mux-h1"
                    ],
                    "product": "HAProxy",
                    "programFiles": [
                        "src/h1_htx.c"
                    ],
                    "programRoutines": [
                        {
                            "name": "h1_parse_msg_data"
                        }
                    ],
                    "repo": "https://git.haproxy.org/git/haproxy.git",
                    "vendor": "HAProxy",
                    "versions": [
                        {
                            "lessThan": "3.0.30",
                            "status": "affected",
                            "version": "3.0.0",
                            "versionType": "custom"
                        },
                        {
                            "lessThan": "3.2.26",
                            "status": "affected",
                            "version": "3.2.0",
                            "versionType": "custom"
                        },
                        {
                            "lessThan": "3.3.17",
                            "status": "affected",
                            "version": "3.3.0",
                            "versionType": "custom"
                        },
                        {
                            "lessThan": "3.4.6",
                            "status": "affected",
                            "version": "3.4.0",
                            "versionType": "custom"
                        },
                        {
                            "lessThan": "3.5-dev9",
                            "status": "affected",
                            "version": "3.5-dev",
                            "versionType": "custom"
                        }
                    ]
                }

{
                    "defaultStatus": "unaffected",
                    "product": "HAProxy Enterprise Edition",
                    "vendor": "HAProxy",
                    "versions": [
                        {
                            "lessThan": "3.0r1-362.1441",
                            "status": "affected",
                            "version": "3.0r1",
                            "versionType": "custom"
                        },
                        {
                            "lessThan": "3.2r1-378.1259",
                            "status": "affected",
                            "version": "3.2r1",
                            "versionType": "custom"
                        },
                        {
                            "lessThan": "3.3r1-377.1005",
                            "status": "affected",
                            "version": "3.3r1",
                            "versionType": "custom"
                        }
                    ]
                }

{
                    "defaultStatus": "unaffected",
                    "product": "HAProxy Kubernetes Ingress Controller",
                    "vendor": "HAProxy Technologies",
                    "versions": [
                        {
                            "lessThan": "3.2.17",
                            "status": "affected",
                            "version": "3.2.0",
                            "versionType": "custom"
                        }
                    ]
                }

{
                    "defaultStatus": "unaffected",
                    "product": "Kubernetes Ingress Controller Enterprise",
                    "vendor": "HAProxy Technologies",
                    "versions": [
                        {
                            "lessThan": "3.2.17-ee1",
                            "status": "affected",
                            "version": "3.2.0",
                            "versionType": "custom"
                        },
                        {
                            "lessThan": "3.0.16-ee17",
                            "status": "affected",
                            "version": "3.0",
                            "versionType": "custom"
                        },
                        {
                            "lessThan": "1.11.14-ee11",
                            "status": "affected",
                            "version": "1.11",
                            "versionType": "custom"
                        }
                    ]
                }