5
CVE-2013-2163
- EPSS 2.51%
- Veröffentlicht 13.06.2014 14:55:11
- Zuletzt bearbeitet 06.05.2026 22:30:45
- Quelle secalert@redhat.com
- CVE-Watchlists
- Unerledigt
LoginMonkey HTTP Daemon (monkeyd) before 1.2.2 allows remote attackers to cause a denial of service (infinite loop) via an offset equal to the file size in the Range HTTP header.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Monkey-project ≫ Monkey Version <= 1.2.1
Monkey-project ≫ Monkey Version1.2.0
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 2.51% | 0.827 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 5 | 10 | 2.9 |
AV:N/AC:L/Au:N/C:N/I:N/A:P
|
CWE-20 Improper Input Validation
The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.
http://www.openwall.com/lists/oss-security/2013/06/10/8
http://www.securityfocus.com/bid/60425
https://exchange.xforce.ibmcloud.com/vulnerabilities/85125
https://github.com/monkey/monkey/issues/90