CVE-2013-3843
NONE EPSS 97.1%
Published Jun 13, 201412y ago · Modified Jun 16, 20262w ago
Published Jun 13, 2014 12y ago
Last Modified Jun 16, 2026 2w ago
Description
Stack-based buffer overflow in the mk_request_header_process function in mk_request.c in Monkey HTTP Daemon (monkeyd) before 1.2.1 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted HTTP header.
Threat Intelligence
EPSS Exploit Probability
97.1% percentile
Exploit & Patch Status
No Known Exploit
No Patch Available
Weaknesses 1
CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer Memory Safety
Affected Products 1
| Vendor | Product | Version | Range |
|---|---|---|---|
| monkey-project | monkey | * | ≤1.2.0 |
References 6
- archives.neohapsis.com http://archives.neohapsis.com/archives/bugtraq/2013-06/0015.html
- bugs.monkey-project.com http://bugs.monkey-project.com/ticket/182
- monkey-project.com http://monkey-project.com/Announcements/v1.2.1
- secunia.com http://secunia.com/advisories/53697
- exchange.xforce.ibmcloud.com https://exchange.xforce.ibmcloud.com/vulnerabilities/84755
- github.com https://github.com/monkey/monkey/issues/88
Remediation
No remediation data recorded yet
Check vendor advisories and the NVD entry for patch availability.