Monkey HTTP Server Use-After-Free Vulnerability in String Character Search Function Allowing Denial-of-Service

A use-after-free vulnerability has been identified in the Monkey HTTP Server, specifically in the mk_string_char_search function within mk_core/mk_string.c. This vulnerability is present in Monkey through commit f37e984. It allows attackers to cause a denial-of-service condition by sending a crafted HTTP request to the server.

Impact

Exploitation of this vulnerability leads to a denial-of-service condition, causing the server to become unresponsive or unavailable.