Bug 2231370 (CVE-2023-40225)
| Summary: | CVE-2023-40225 haproxy: Proxy forwards malformed empty Content-Length headers | ||
|---|---|---|---|
| Product: | [Other] Security Response | Reporter: | Pedro Sampaio <psampaio> |
| Component: | vulnerability | Assignee: | Nobody <nobody> |
| Status: | NEW --- | QA Contact: | |
| Severity: | medium | Docs Contact: | |
| Priority: | medium | ||
| Version: | unspecified | CC: | aazores, amctagga, aoconnor, bniver, chazlett, dfreiber, eaguilar, ebaron, flucifre, gmeno, gsuckevi, hhorak, jburrell, jkang, jorton, jpallich, mbenjamin, mhackett, pjindal, redhat-bugzilla, rogbas, rohara, sfroberg, sostapov, vereddy, vkumar, vumrao |
| Target Milestone: | --- | Keywords: | Security |
| Target Release: | --- | ||
| Hardware: | All | ||
| OS: | Linux | ||
| Whiteboard: | |||
| Fixed In Version: | haproxy 2.6.15, haproxy 2.7.10, haproxy 2.8.2 | Doc Type: | If docs needed, set a value |
| Doc Text: |
A flaw was found in HAProxy. Empty Content-Length headers are forwarded, which could cause an HTTP/1 server behind it to interpret the payload as an extra request. This may render the HTTP/1 server vulnerable to attacks in some uncommon cases.
|
Story Points: | --- |
| Clone Of: | Environment: | ||
| Last Closed: | Type: | --- | |
| Regression: | --- | Mount Type: | --- |
| Documentation: | --- | CRM: | |
| Verified Versions: | Category: | --- | |
| oVirt Team: | --- | RHEL 7.3 requirements from Atomic Host: | |
| Cloudforms Team: | --- | Target Upstream Version: | |
| Embargoed: | |||
| Bug Depends On: | 2231372, 2231384, 2231371, 2231381, 2231382, 2231383 | ||
| Bug Blocks: | 2231385 | ||
|
Description
Pedro Sampaio
2023-08-11 12:29:49 UTC
Created haproxy tracking bugs for this issue: Affects: fedora-all [bug 2231371] Created haproxy18 tracking bugs for this issue: Affects: epel-7 [bug 2231372] Please note that HAProxy versions before version 2.0, e.g. 1.8 as shipped in RHEL 8 or 1.5 as shipped in RHEL 7, are also affected. See https://github.com/haproxy/haproxy/issues/2237#issuecomment-1676113850 (and comment replies) for more details. This issue has been addressed in the following products: Red Hat OpenShift Container Platform 4.14 Via RHSA-2023:7473 https://access.redhat.com/errata/RHSA-2023:7473 This issue has been addressed in the following products: Red Hat OpenShift Container Platform 4.13 Via RHSA-2023:7606 https://access.redhat.com/errata/RHSA-2023:7606 This issue has been addressed in the following products: Red Hat OpenShift Container Platform 4.12 Via RHSA-2024:0200 https://access.redhat.com/errata/RHSA-2024:0200 This issue has been addressed in the following products: Red Hat OpenShift Container Platform 4.11 Via RHSA-2024:0308 https://access.redhat.com/errata/RHSA-2024:0308 This issue has been addressed in the following products: Red Hat OpenShift Container Platform 4.15 Via RHSA-2023:7201 https://access.redhat.com/errata/RHSA-2023:7201 This issue has been addressed in the following products: Red Hat Enterprise Linux 9.2 Extended Update Support Via RHSA-2024:1089 https://access.redhat.com/errata/RHSA-2024:1089 This issue has been addressed in the following products: Red Hat Enterprise Linux 9 Via RHSA-2024:1142 https://access.redhat.com/errata/RHSA-2024:1142 |