CVE-2013-3724

medium · 5

The mk_request_header_process function in mk_request.c in Monkey 1.1.1 allows remote attackers to cause a denial of service (thread crash and service outage) via a '\0' character in an HTTP request.

CVSS

13.7%

EPSS (exploit prob.)

96th

EPSS percentile

2013-08-01

Published

AV:N/AC:L/Au:N/C:N/I:N/A:P

Weaknesses

CWE-20

Affected products

Vendor	Product	Affected versions
monkey-project	monkey	1.1.1

Check a specific version with /api/v1/cve/match.

References

http://bugs.monkey-project.com/ticket/181
http://bugs.monkey-project.com/ticket/181

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2013-3724