CVE-2025-63656: High severity Monkey Monkey HTTP Server vulnerability
An out-of-bounds read in the headercmp function (mkserver/mkhttpparser.c) of monkey commit f37e984 allows attackers to cause a Denial of Service (DoS) via sending a crafted HTTP request to the server.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-63656?
CVE-2025-63656 is classified as a high severity vulnerability due to its potential to enable Denial of Service (DoS) attacks.
How do I fix CVE-2025-63656?
To fix CVE-2025-63656, update the Monkey HTTP Server to version 1.8.6 or later where the vulnerability has been addressed.
What systems are affected by CVE-2025-63656?
CVE-2025-63656 affects versions of the Monkey HTTP Server up to and including 1.8.5.
What kind of attack is facilitated by CVE-2025-63656?
CVE-2025-63656 allows attackers to leverage an out-of-bounds read to perform Denial of Service (DoS) attacks on the server.
What does the header_cmp function do in relation to CVE-2025-63656?
In CVE-2025-63656, the header_cmp function is vulnerable due to an out-of-bounds read which can be exploited by sending crafted HTTP requests.