CVE-2013-3724: Monkey-Project Monkey

Medium severity, CVSS 5.0. EPSS: 13.7% chance of exploitation in the next 30 days.

The mk_request_header_process function in mk_request.c in Monkey 1.1.1 allows remote attackers to cause a denial of service (thread crash and service outage) via a '\0' character in an HTTP request.

Affected products

• Monkey-Project Monkey: version 1.1.1 only

Published 2013-08-01. Last modified 2026-06-16.