PT-2023-4258 · Unknown+1 · Protocol-Http1+1

Jianjun Chen

+1

·

Published

2023-07-30

·

Updated

2026-03-07

·

CVE-2023-38697

CVSS v3.1

5.8

Medium

VectorAV:N/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:N
Name of the Vulnerable Software and Affected Versions protocol-http1 versions prior to 0.15.1
Description The issue is related to the implementation of the HTTP/1 protocol in protocol-http1, specifically with the handling of HTTP requests. The problem arises from the acceptance of non-standard formats for the Content-Length header and chunk size, which can lead to desynchronization when forwarding through multiple HTTP parsers. This can potentially result in HTTP request smuggling and firewall bypassing. The behavior does not follow the corresponding RFCs, which define the format for chunk size, chunk data, and chunk extension. There are no known real-world exploits or practical attacks reported.
Recommendations For protocol-http1 versions prior to 0.15.1, update to version 0.15.1 or later to fix the issue. As a temporary workaround, consider restricting the use of the Content-Length header and chunk size to standard formats to minimize the risk of exploitation. Avoid using the + prefix and 0x prefix in the Content-Length header and chunk size until the issue is resolved. Restrict access to the vulnerable protocol-http1 module to minimize the risk of exploitation.

Exploit

Fix

HTTP Request/Response Smuggling

Weakness Enumeration

Related Identifiers

AZL-27830
BDU:2023-04573
CVE-2023-38697
GHSA-6JWC-QR2Q-7XWJ

Affected Products

Debian
Protocol-Http1