CVE-2023-40225
- Source
- https://nvd.nist.gov/vuln/detail/CVE-2023-40225
- Import Source
- https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2023-40225.json
- JSON Data
- https://api.test.osv.dev/v1/vulns/CVE-2023-40225
- Aliases
- Downstream
- Related
- Published
- 2023-08-10T21:15:10Z
- Modified
- 2025-09-05T06:12:39.424018Z
- Severity
-
- 7.2 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N CVSS Calculator
- Summary
- [none]
- Details
-
HAProxy through 2.0.32, 2.1.x and 2.2.x through 2.2.30, 2.3.x and 2.4.x through 2.4.23, 2.5.x and 2.6.x before 2.6.15, 2.7.x before 2.7.10, and 2.8.x before 2.8.2 forwards empty Content-Length headers, violating RFC 9110 section 8.6. In uncommon cases, an HTTP/1 server behind HAProxy may interpret the payload as an extra request.
- References
-
- https://github.com/haproxy/haproxy/issues/2237
- https://www.haproxy.org/download/2.6/src/CHANGELOG
- https://www.haproxy.org/download/2.7/src/CHANGELOG
- https://www.haproxy.org/download/2.8/src/CHANGELOG
- https://cwe.mitre.org/data/definitions/436.html
- https://github.com/haproxy/haproxy/commit/6492f1f29d738457ea9f382aca54537f35f9d856
- https://security-tracker.debian.org/tracker/CVE-2023-40225
Affected packages
Debian:11 / haproxy
Package
- Name
- haproxy
- Purl
- pkg:deb/debian/haproxy?arch=source
Affected ranges
- Type
- ECOSYSTEM
- Events
-
Introduced0Unknown introduced version / All previous versions are affectedFixed2.2.9-2+deb11u6
Debian:12 / haproxy
Package
- Name
- haproxy
- Purl
- pkg:deb/debian/haproxy?arch=source
Debian:13 / haproxy
Package
- Name
- haproxy
- Purl
- pkg:deb/debian/haproxy?arch=source
Debian:14 / haproxy
Package
- Name
- haproxy
- Purl
- pkg:deb/debian/haproxy?arch=source
Git / git.haproxy.org/haproxy-2.6.git
Affected ranges
- Type
- GIT
- Repo
- https://git.haproxy.org/haproxy-2.6.git
- Events
-
Introducedf2e0833f16aa8c09e1c7001ff55aac4f13c643b7Fixed446b02c89880ca778201642016e5d7de6e969532
- Type
- GIT
- Repo
- https://git.haproxy.org/haproxy-3.0.git
- Events
-
Introducedfdd8154ed37fef7f351075caa357917f94704dd7Fixed0f29b34e0a06cdd59ae2278d33c16f63ca435468
- Type
- GIT
- Repo
- https://git.haproxy.org/haproxy.git
- Events
-
Introduced437fd289f2e32e56498d2d4da63852d483f284efFixed0279df9e824723004b27cae2d4a04a7b1b924202
- Type
- GIT
- Repo
- https://github.com/haproxy/haproxy
- Events
-
Introduced0 Unknown introduced commit / All previous commits are affectedFixed
Affected versions
v1.*
v1.0.0
v1.0.1
v1.0.2
v1.1.0
v1.1.1
v1.1.10
v1.1.11
v1.1.12
v1.1.13
v1.1.14
v1.1.15
v1.1.16
v1.1.17
v1.1.18
v1.1.19
v1.1.2
v1.1.20
v1.1.21
v1.1.22
v1.1.23
v1.1.24
v1.1.25
v1.1.26
v1.1.27
v1.1.3
v1.1.4
v1.1.5
v1.1.6
v1.1.7
v1.1.8
v1.1.9
v1.2.0
v1.2.1
v1.2.1-pre1
v1.2.1-pre2
v1.2.1-pre3
v1.2.10
v1.2.10.1
v1.2.11
v1.2.11.1
v1.2.12
v1.2.13
v1.2.13.1
v1.2.14
v1.2.2
v1.2.3
v1.2.4
v1.2.5
v1.2.5-pre1
v1.2.5-pre2
v1.2.5-pre3
v1.2.5-pre4
v1.2.5.1
v1.2.5.2
v1.2.6
v1.2.6-pre4
v1.2.6-pre5
v1.2.7
v1.2.7.1
v1.2.7rc
v1.2.8
v1.2.9
v1.3.0
v1.3.1
v1.3.10
v1.3.10.1
v1.3.10.2
v1.3.11
v1.3.11.1
v1.3.11.2
v1.3.11.3
v1.3.11.4
v1.3.12
v1.3.13
v1.3.14
v1.3.15
v1.3.16
v1.3.16-rc1
v1.3.16-rc2
v1.3.17
v1.3.18
v1.3.2
v1.3.3
v1.3.4
v1.3.5
v1.3.6
v1.3.6.1
v1.3.7
v1.3.8
v1.3.8.1
v1.3.8.2
v1.3.9
v1.4-dev0
v1.4-dev1
v1.4-dev2
v1.4-dev3
v1.4-dev4
v1.4-dev5
v1.4-dev6
v1.4-dev7
v1.4-dev8
v1.4-rc1
v1.4.0
v1.4.1
v1.4.2
v1.4.3
v1.4.4
v1.4.5
v1.4.6
v1.5-dev10
v1.5-dev12
v1.5-dev13
v1.5-dev14
v1.5-dev15
v1.5-dev16
v1.5-dev17
v1.5-dev18
v1.5-dev19
v1.5-dev20
v1.5-dev21
v1.5-dev22
v1.5-dev23
v1.5-dev24
v1.5-dev25
v1.5-dev26
v1.5-dev8
v1.5-dev9
v1.5.0
v1.6-dev0
v1.6-dev1
v1.6-dev2
v1.6-dev3
v1.6-dev4
v1.6-dev5
v1.6-dev6
v1.6-dev7
v1.6.0
v1.7-dev0
v1.7-dev1
v1.7-dev2
v1.7-dev3
v1.7-dev4
v1.7-dev5
v1.7-dev6
v1.7.0
v1.8-dev0
v1.8-dev1
v1.8-dev2
v1.8-dev3
v1.8-rc1
v1.8-rc2
v1.8-rc3
v1.8-rc4
v1.8.0
v1.9-dev0
v1.9-dev1
v1.9-dev10
v1.9-dev11
v1.9-dev2
v1.9-dev3
v1.9-dev4
v1.9-dev5
v1.9-dev6
v1.9-dev7
v1.9-dev8
v1.9-dev9
v1.9.0
v2.*
v2.0-dev0
v2.0-dev1
v2.0-dev2
v2.0-dev3
v2.0-dev4
v2.0-dev5
v2.0-dev6
v2.0-dev7
v2.0.0
v2.1-dev0
v2.1-dev1
v2.1-dev2
v2.1-dev3
v2.1-dev4
v2.1-dev5
v2.1.0
v2.2-dev0
v2.2-dev1
v2.2-dev10
v2.2-dev11
v2.2-dev12
v2.2-dev2
v2.2-dev3
v2.2-dev4
v2.2-dev5
v2.2-dev6
v2.2-dev7
v2.2-dev8
v2.2-dev9
v2.2.0
v2.3-dev0
v2.3-dev1
v2.3-dev2
v2.3-dev3
v2.3-dev4
v2.3-dev5
v2.3-dev6
v2.3-dev7
v2.3-dev8
v2.3-dev9
v2.3.0
v2.4-dev0
v2.4-dev1
v2.4-dev10
v2.4-dev11
v2.4-dev12
v2.4-dev13
v2.4-dev14
v2.4-dev15
v2.4-dev16
v2.4-dev17
v2.4-dev18
v2.4-dev19
v2.4-dev2
v2.4-dev3
v2.4-dev4
v2.4-dev5
v2.4-dev6
v2.4-dev7
v2.4-dev8
v2.4-dev9
v2.4.0
v2.5-dev0
v2.5-dev1
v2.5-dev10
v2.5-dev11
v2.5-dev12
v2.5-dev13
v2.5-dev14
v2.5-dev15
v2.5-dev2
v2.5-dev3
v2.5-dev4
v2.5-dev5
v2.5-dev6
v2.5-dev7
v2.5-dev8
v2.5-dev9
v2.5.0
v2.6-dev0
v2.6-dev1
v2.6-dev10
v2.6-dev11
v2.6-dev12
v2.6-dev2
v2.6-dev3
v2.6-dev4
v2.6-dev5
v2.6-dev6
v2.6-dev7
v2.6-dev8
v2.6-dev9
v2.6.0
v2.6.1
v2.6.10
v2.6.11
v2.6.12
v2.6.13
v2.6.14
v2.6.2
v2.6.3
v2.6.4
v2.6.5
v2.6.6
v2.6.7
v2.6.8
v2.6.9
v2.7-dev0
v2.7-dev1
v2.7-dev10
v2.7-dev2
v2.7-dev3
v2.7-dev4
v2.7-dev5
v2.7-dev6
v2.7-dev7
v2.7-dev8
v2.7-dev9
v2.7.0
v2.8-dev0
v2.8-dev1
v2.8-dev10
v2.8-dev11
v2.8-dev12
v2.8-dev13
v2.8-dev2
v2.8-dev3
v2.8-dev4
v2.8-dev5
v2.8-dev6
v2.8-dev7
v2.8-dev8
v2.8-dev9
v2.8.0
v2.9-dev0
v2.9-dev1
v2.9-dev2
Database specific
{
"vanir_signatures": [
{
"target": {
"function": "http_parse_cont_len_header",
"file": "src/http.c"
},
"id": "CVE-2023-40225-321cb63a",
"deprecated": false,
"digest": {
"function_hash": "233598116403124394327874341684154081692",
"length": 920.0
},
"source": "https://github.com/haproxy/haproxy/commit/6492f1f29d738457ea9f382aca54537f35f9d856",
"signature_type": "Function",
"signature_version": "v1"
},
{
"target": {
"file": "src/h1.c"
},
"id": "CVE-2023-40225-6bc15f13",
"deprecated": false,
"digest": {
"line_hashes": [
"165144268708067503662197180751835168325",
"181476966816870361302138927755052419995",
"38169904124979107543682445298778353719",
"90172390201955149448003837056493578792",
"190028181374243338045588907346606455051",
"107505088545251584894189210534290438397",
"331204091758823654164950303515118093648",
"236794157206778696007620946270386607677",
"252811914131326760711167158666797745135",
"31722181914028338651024671069621308286",
"150844051917068265160765471746425755346",
"286321739378888021026416454718199891256"
],
"threshold": 0.9
},
"source": "https://github.com/haproxy/haproxy/commit/6492f1f29d738457ea9f382aca54537f35f9d856",
"signature_type": "Line",
"signature_version": "v1"
},
{
"target": {
"file": "src/http.c"
},
"id": "CVE-2023-40225-e91d6762",
"deprecated": false,
"digest": {
"line_hashes": [
"72171713211711176057473768202252814200",
"63927162197679533977345581072990894618",
"94110014460971723384658371440440144532",
"90172390201955149448003837056493578792",
"190028181374243338045588907346606455051",
"107505088545251584894189210534290438397",
"331204091758823654164950303515118093648",
"236794157206778696007620946270386607677",
"17986306145591369186963995970127593066",
"285864856605371214411020876314555345112",
"283123263476167121878797278369257674902",
"301864301687022632947606540948909654137"
],
"threshold": 0.9
},
"source": "https://github.com/haproxy/haproxy/commit/6492f1f29d738457ea9f382aca54537f35f9d856",
"signature_type": "Line",
"signature_version": "v1"
},
{
"target": {
"function": "h1_parse_cont_len_header",
"file": "src/h1.c"
},
"id": "CVE-2023-40225-f584ff7d",
"deprecated": false,
"digest": {
"function_hash": "228028521571946842552203437083185495676",
"length": 1001.0
},
"source": "https://github.com/haproxy/haproxy/commit/6492f1f29d738457ea9f382aca54537f35f9d856",
"signature_type": "Function",
"signature_version": "v1"
}
]
}