What is CVE-2013-3724?

CVE-2013-3724 is a vulnerability in Monkey-Project Monkey, classified under Improper Input Validation. Published 2013-08-01.

Is CVE-2013-3724 known to be exploited?

2 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.

Improper input validation in Monkey-Project Monkey

CVE-2013-3724

The mk_request_header_process function in mk_request.c in Monkey 1.1.1 allows remote attackers to cause a denial of service (thread crash and service outage) via a '\0' character in an HTTP request.

Vulnerability class: Drupalgeddon 2 (CVE-2018-7600)

EPSS: 0.137 (96.1th percentile) — read the EPSS interpretation.

Affected products

Monkey-project Monkey — versions 1.1.1
N/a — versions n/a

Weakness classification (CWE)

CWE-20 — Improper Input Validation

Public proof-of-concept exploits

mudongliang/LinuxFlaw
oneoy/cve-

References

cve@mitre.org (x_refsource_CONFIRM, Exploit, Patch)

Frequently asked questions

What is CVE-2013-3724?: CVE-2013-3724 is a vulnerability in Monkey-Project Monkey, classified under Improper Input Validation. Published 2013-08-01.
Is CVE-2013-3724 known to be exploited?: 2 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.