Monkey HTTP Server Out-of-Bounds Read Vulnerability in HTTP Parser Component Allowing Denial-of-Service

A denial-of-service vulnerability has been identified in the Monkey HTTP Server, specifically in the http_parser_transfer_encoding_chunked function of the HTTP parser component. This vulnerability, present in versions of Monkey through commit f37e984, allows attackers to cause a denial-of-service condition by sending a crafted POST request to the server. The issue arises from an out-of-bounds read, which can be exploited to disrupt normal server operations.

Impact

Exploitation of this vulnerability leads to a denial-of-service condition, causing the server to become unresponsive or unavailable.