CVE-2013-3843: Monkey-Project Monkey

Medium severity, CVSS 6.8. EPSS: 20.2% chance of exploitation in the next 30 days.

Stack-based buffer overflow in the mk_request_header_process function in mk_request.c in Monkey HTTP Daemon (monkeyd) before 1.2.1 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted HTTP header.

Affected products

• Monkey-Project Monkey: up to and including 1.2.0

Published 2014-06-13. Last modified 2026-06-16.