PT-2025-9285 · Libhv · Libhv

Nluedtke + 1 · Published 2025-03-03 · Updated 2025-03-07 · CVE-2025-1867

Positive Technologies (AI Summary)

CVSS v4.0

10

Critical

Base vector

AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H

Name of the Vulnerable Software and Affected Versions libhv versions through 1.3.3

Description The issue affects the interpretation of HTTP requests, allowing for HTTP Response Smuggling. This can lead to inconsistent handling of HTTP requests and responses.

Recommendations For versions through 1.3.3, update to a version that addresses the HTTP Request/Response Smuggling issue to prevent inconsistent interpretation of HTTP requests.

Fix

HTTP Request/Response Smuggling

Weakness Enumeration

CWE-444

Related Identifiers

BDU:2025-14636

CVE-2025-1867

Affected Products

Libhv

References · 8

• https://github.com/ithewei/libhv/pull/689 · Patch
• https://osv.dev/vulnerability/CVE-2025-1867 · Vendor Advisory
• https://bdu.fstec.ru/vul/2025-14636 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2025-1867 · Security Note
• https://twitter.com/CVEnew/status/1897912329595150751 · Twitter Post
• https://twitter.com/CveFindCom/status/1896486238758031719 · Twitter Post
• https://t.me/cvedetector/19317 · Telegram Post
• https://twitter.com/CCBalert/status/1896960392003269004 · Twitter Post