CVE-2023-40225

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2023-40225
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2023-40225.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2023-40225
Aliases
Downstream
Related
Published
2023-08-10T21:15:10.743Z
Modified
2026-02-28T06:39:52.301929Z
Severity
  • 7.2 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N CVSS Calculator
Summary
[none]
Details

HAProxy through 2.0.32, 2.1.x and 2.2.x through 2.2.30, 2.3.x and 2.4.x through 2.4.23, 2.5.x and 2.6.x before 2.6.15, 2.7.x before 2.7.10, and 2.8.x before 2.8.2 forwards empty Content-Length headers, violating RFC 9110 section 8.6. In uncommon cases, an HTTP/1 server behind HAProxy may interpret the payload as an extra request.

References

Affected packages

Git / git.haproxy.org/haproxy-2.6.git

Affected ranges

Type
GIT
Repo
https://git.haproxy.org/haproxy-2.6.git
Events
Introduced
f2e0833f16aa8c09e1c7001ff55aac4f13c643b7
Fixed
446b02c89880ca778201642016e5d7de6e969532

Affected versions

v2.*
v2.5.0
v2.6-dev0
v2.6-dev1
v2.6-dev10
v2.6-dev11
v2.6-dev12
v2.6-dev2
v2.6-dev3
v2.6-dev4
v2.6-dev5
v2.6-dev6
v2.6-dev7
v2.6-dev8
v2.6-dev9
v2.6.0
v2.6.1
v2.6.10
v2.6.11
v2.6.12
v2.6.13
v2.6.14
v2.6.2
v2.6.3
v2.6.4
v2.6.5
v2.6.6
v2.6.7
v2.6.8
v2.6.9

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2023-40225.json"

Git / github.com/haproxy/haproxy

Affected ranges

Type
GIT
Repo
https://github.com/haproxy/haproxy
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Fixed
6492f1f29d738457ea9f382aca54537f35f9d856
Introduced
437fd289f2e32e56498d2d4da63852d483f284ef
Fixed
0279df9e824723004b27cae2d4a04a7b1b924202
Introduced
fdd8154ed37fef7f351075caa357917f94704dd7
Fixed
0f29b34e0a06cdd59ae2278d33c16f63ca435468

Affected versions

v2.*
v2.7.0
v2.8-dev0
v2.8-dev1
v2.8-dev10
v2.8-dev11
v2.8-dev12
v2.8-dev13
v2.8-dev2
v2.8-dev3
v2.8-dev4
v2.8-dev5
v2.8-dev6
v2.8-dev7
v2.8-dev8
v2.8-dev9
v2.8.0
v2.9-dev0
v2.9-dev1
v2.9-dev2

Database specific

vanir_signatures 
[
    {
        "digest": {
            "length": 920.0,
            "function_hash": "233598116403124394327874341684154081692"
        },
        "source": "https://github.com/haproxy/haproxy/commit/6492f1f29d738457ea9f382aca54537f35f9d856",
        "deprecated": false,
        "id": "CVE-2023-40225-321cb63a",
        "signature_type": "Function",
        "target": {
            "function": "http_parse_cont_len_header",
            "file": "src/http.c"
        },
        "signature_version": "v1"
    },
    {
        "digest": {
            "threshold": 0.9,
            "line_hashes": [
                "165144268708067503662197180751835168325",
                "181476966816870361302138927755052419995",
                "38169904124979107543682445298778353719",
                "90172390201955149448003837056493578792",
                "190028181374243338045588907346606455051",
                "107505088545251584894189210534290438397",
                "331204091758823654164950303515118093648",
                "236794157206778696007620946270386607677",
                "252811914131326760711167158666797745135",
                "31722181914028338651024671069621308286",
                "150844051917068265160765471746425755346",
                "286321739378888021026416454718199891256"
            ]
        },
        "source": "https://github.com/haproxy/haproxy/commit/6492f1f29d738457ea9f382aca54537f35f9d856",
        "deprecated": false,
        "id": "CVE-2023-40225-6bc15f13",
        "signature_type": "Line",
        "target": {
            "file": "src/h1.c"
        },
        "signature_version": "v1"
    },
    {
        "digest": {
            "threshold": 0.9,
            "line_hashes": [
                "72171713211711176057473768202252814200",
                "63927162197679533977345581072990894618",
                "94110014460971723384658371440440144532",
                "90172390201955149448003837056493578792",
                "190028181374243338045588907346606455051",
                "107505088545251584894189210534290438397",
                "331204091758823654164950303515118093648",
                "236794157206778696007620946270386607677",
                "17986306145591369186963995970127593066",
                "285864856605371214411020876314555345112",
                "283123263476167121878797278369257674902",
                "301864301687022632947606540948909654137"
            ]
        },
        "source": "https://github.com/haproxy/haproxy/commit/6492f1f29d738457ea9f382aca54537f35f9d856",
        "deprecated": false,
        "id": "CVE-2023-40225-e91d6762",
        "signature_type": "Line",
        "target": {
            "file": "src/http.c"
        },
        "signature_version": "v1"
    },
    {
        "digest": {
            "length": 1001.0,
            "function_hash": "228028521571946842552203437083185495676"
        },
        "source": "https://github.com/haproxy/haproxy/commit/6492f1f29d738457ea9f382aca54537f35f9d856",
        "deprecated": false,
        "id": "CVE-2023-40225-f584ff7d",
        "signature_type": "Function",
        "target": {
            "function": "h1_parse_cont_len_header",
            "file": "src/h1.c"
        },
        "signature_version": "v1"
    }
]
source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2023-40225.json"