CVE-2023-40225

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2023-40225
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2023-40225.json
JSON Data
https://api.test.osv.dev/v1/vulns/CVE-2023-40225
Aliases
Downstream
Related
Published
2023-08-10T21:15:10.743Z
Modified
2026-04-12T08:01:23.219538Z
Severity
  • 7.2 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N CVSS Calculator
Summary
[none]
Details

HAProxy through 2.0.32, 2.1.x and 2.2.x through 2.2.30, 2.3.x and 2.4.x through 2.4.23, 2.5.x and 2.6.x before 2.6.15, 2.7.x before 2.7.10, and 2.8.x before 2.8.2 forwards empty Content-Length headers, violating RFC 9110 section 8.6. In uncommon cases, an HTTP/1 server behind HAProxy may interpret the payload as an extra request.

Database specific 
{
    "unresolved_ranges": [
        {
            "extracted_events": [
                {
                    "last_affected": "2.0.32"
                },
                {
                    "introduced": "2.2.0"
                },
                {
                    "last_affected": "2.2.30"
                },
                {
                    "introduced": "2.4.0"
                },
                {
                    "last_affected": "2.4.23"
                },
                {
                    "introduced": "2.5.0"
                },
                {
                    "fixed": "2.6.15"
                }
            ],
            "cpe": "cpe:2.3:a:haproxy:haproxy:*:*:*:*:*:*:*:*",
            "source": "CPE_FIELD"
        }
    ]
}
References

Affected packages

Git / github.com/haproxy/haproxy

Affected ranges

Type
GIT
Repo
https://github.com/haproxy/haproxy
Events
Introduced
437fd289f2e32e56498d2d4da63852d483f284ef
Fixed
0279df9e824723004b27cae2d4a04a7b1b924202
Introduced
fdd8154ed37fef7f351075caa357917f94704dd7
Fixed
0f29b34e0a06cdd59ae2278d33c16f63ca435468
Fixed
6492f1f29d738457ea9f382aca54537f35f9d856
Database specific 
{
    "extracted_events": [
        {
            "introduced": "2.7.0"
        },
        {
            "fixed": "2.7.10"
        },
        {
            "introduced": "2.8.0"
        },
        {
            "fixed": "2.8.2"
        }
    ],
    "cpe": "cpe:2.3:a:haproxy:haproxy:*:*:*:*:*:*:*:*",
    "source": [
        "CPE_FIELD",
        "REFERENCES"
    ]
}

Affected versions

v2.*
v2.7.0
v2.8-dev0
v2.8-dev1
v2.8.0
v2.9-dev0
v2.9-dev1
v2.9-dev2

Database specific

vanir_signatures 
[
    {
        "id": "CVE-2023-40225-321cb63a",
        "signature_version": "v1",
        "deprecated": false,
        "target": {
            "function": "http_parse_cont_len_header",
            "file": "src/http.c"
        },
        "digest": {
            "function_hash": "233598116403124394327874341684154081692",
            "length": 920.0
        },
        "source": "https://github.com/haproxy/haproxy/commit/6492f1f29d738457ea9f382aca54537f35f9d856",
        "signature_type": "Function"
    },
    {
        "id": "CVE-2023-40225-6bc15f13",
        "signature_version": "v1",
        "deprecated": false,
        "target": {
            "file": "src/h1.c"
        },
        "digest": {
            "line_hashes": [
                "165144268708067503662197180751835168325",
                "181476966816870361302138927755052419995",
                "38169904124979107543682445298778353719",
                "90172390201955149448003837056493578792",
                "190028181374243338045588907346606455051",
                "107505088545251584894189210534290438397",
                "331204091758823654164950303515118093648",
                "236794157206778696007620946270386607677",
                "252811914131326760711167158666797745135",
                "31722181914028338651024671069621308286",
                "150844051917068265160765471746425755346",
                "286321739378888021026416454718199891256"
            ],
            "threshold": 0.9
        },
        "source": "https://github.com/haproxy/haproxy/commit/6492f1f29d738457ea9f382aca54537f35f9d856",
        "signature_type": "Line"
    },
    {
        "id": "CVE-2023-40225-e91d6762",
        "signature_version": "v1",
        "deprecated": false,
        "target": {
            "file": "src/http.c"
        },
        "digest": {
            "line_hashes": [
                "72171713211711176057473768202252814200",
                "63927162197679533977345581072990894618",
                "94110014460971723384658371440440144532",
                "90172390201955149448003837056493578792",
                "190028181374243338045588907346606455051",
                "107505088545251584894189210534290438397",
                "331204091758823654164950303515118093648",
                "236794157206778696007620946270386607677",
                "17986306145591369186963995970127593066",
                "285864856605371214411020876314555345112",
                "283123263476167121878797278369257674902",
                "301864301687022632947606540948909654137"
            ],
            "threshold": 0.9
        },
        "source": "https://github.com/haproxy/haproxy/commit/6492f1f29d738457ea9f382aca54537f35f9d856",
        "signature_type": "Line"
    },
    {
        "id": "CVE-2023-40225-f584ff7d",
        "signature_version": "v1",
        "deprecated": false,
        "target": {
            "function": "h1_parse_cont_len_header",
            "file": "src/h1.c"
        },
        "digest": {
            "function_hash": "228028521571946842552203437083185495676",
            "length": 1001.0
        },
        "source": "https://github.com/haproxy/haproxy/commit/6492f1f29d738457ea9f382aca54537f35f9d856",
        "signature_type": "Function"
    }
]
vanir_signatures_modified 
"2026-04-12T08:01:23Z"
source 
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2023-40225.json"