What is CVE-2013-3843?

CVE-2013-3843 is a vulnerability in Monkey-Project Monkey, classified under Improper Restriction of Operations within the Bounds of a Memory Buffer. Published 2014-06-13.

Is CVE-2013-3843 known to be exploited?

1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.

Buffer overflow in Monkey-Project Monkey

CVE-2013-3843

Stack-based buffer overflow in the mk_request_header_process function in mk_request.c in Monkey HTTP Daemon (monkeyd) before 1.2.1 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted HTTP header.

Vulnerability class: Buffer Overflow

EPSS: 0.202 (97.2th percentile) — read the EPSS interpretation.

Affected products

Monkey-project Monkey
N/a — versions n/a

Weakness classification (CWE)

CWE-119 — Improper Restriction of Operations within the Bounds of a Memory Buffer

Public proof-of-concept exploits

rapid7/metasploit-framework

References

cve@mitre.org (x_refsource_SECUNIA, third-party-advisory)
cve@mitre.org (x_refsource_CONFIRM)
cve@mitre.org (x_refsource_CONFIRM, Vendor Advisory)
cve@mitre.org (x_refsource_CONFIRM)
cve@mitre.org (vdb-entry, x_refsource_XF)
cve@mitre.org (mailing-list, x_refsource_BUGTRAQ)

Frequently asked questions

What is CVE-2013-3843?: CVE-2013-3843 is a vulnerability in Monkey-Project Monkey, classified under Improper Restriction of Operations within the Bounds of a Memory Buffer. Published 2014-06-13.
Is CVE-2013-3843 known to be exploited?: 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.