CVE-2014-5336

Monkey HTTP Server < 1.5.3 - Denial of Service via Custom Error Message Handling

Title source: llm
STIX 2.1

Description

Monkey HTTP Server before 1.5.3, when the File Descriptor Table (FDT) is enabled and custom error messages are set, allows remote attackers to cause a denial of service (file descriptor consumption) via an HTTP request that triggers an error message.

References (7)

Core 7
Core References
Third Party Advisory, VDB Entry vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/95336
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/69279
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/60783
Various Sources x_refsource_confirm
http://monkey-project.com/Announcements/v1.5.3
Mailing List mailing-list x_refsource_mlist
http://seclists.org/oss-sec/2014/q3/397
Mailing List mailing-list x_refsource_mlist
http://seclists.org/oss-sec/2014/q3/412

Scores

EPSS 0.0245
EPSS Percentile 82.5%

Details

CWE
CWE-20
Status published
Products (49)
monkey-project/monkey 0.1.1
monkey-project/monkey 0.1.4
monkey-project/monkey 0.5.0
monkey-project/monkey 0.5.1
monkey-project/monkey 0.5.2
monkey-project/monkey 0.6.0
monkey-project/monkey 0.6.1
monkey-project/monkey 0.6.2
monkey-project/monkey 0.6.3
monkey-project/monkey 0.7.0
... and 39 more
Published Aug 26, 2014
Tracked Since Feb 18, 2026