CVE-2025-63658: High severity monkey vulnerability
Published Jan 29, 2026
·Updated
A stack overflow in the mkhttpindexlookup function (mkserver/mkhttp.c) of monkey commit f37e984 allows attackers to cause a Denial of Service (DoS) via sending a crafted HTTP request to the server.
Affected Software
2 affected components
monkey
Monkey-project Monkey<=1.8.5
Event History
Jan 29, 2026
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Data Sourced
via NVD·08:16 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2025-63658?
CVE-2025-63658 is classified as a high severity vulnerability due to its potential to cause a Denial of Service (DoS).
2
How do I fix CVE-2025-63658?
To fix CVE-2025-63658, update to a version of the Monkey server that is newer than 1.8.5, which addresses this vulnerability.
3
What impact does CVE-2025-63658 have on affected systems?
CVE-2025-63658 can lead to Denial of Service (DoS), rendering the affected Monkey server inaccessible to legitimate users.
4
Which versions of Monkey are affected by CVE-2025-63658?
CVE-2025-63658 affects all versions of Monkey up to and including 1.8.5.
5
Who can exploit CVE-2025-63658?
Any attacker capable of sending a crafted HTTP request can potentially exploit CVE-2025-63658.