Monkey HTTP Server Use-After-Free Vulnerability in HTTP Request Handling Function Allowing Denial-of-Service

A use-after-free vulnerability has been identified in the Monkey HTTP Server, specifically in the mk_http_request_end function within mk_server/mk_http.c. This vulnerability is present in Monkey through commit f37e984. It allows attackers to cause a denial-of-service condition by sending a crafted HTTP request to the server.

Impact

Exploitation of this vulnerability leads to a denial-of-service condition, causing the server to become unresponsive or unavailable.