CVE-2014-5336: Monkey HTTP Server before 1.5.3, when the File Descriptor Table (FDT) is enabled and custom error messages...

Security readout for executives and security teams

This issue lets a remote requester exhaust Monkey HTTP Server file descriptors, causing service disruption, but only when the File Descriptor Table feature is enabled and custom error messages are configured. Sources identify versions before 1.5.3. There is no KEV listing or provided evidence of active exploitation. Exposure is likely limited to organizations still running Monkey HTTP Server before 1.5.3 with FDT enabled and custom error messages configured. Internet-facing deployments would carry higher availability risk. Evidence does not identify broader products or downstream packages. Treat this as a targeted availability risk, not a broad emergency. Prioritize if Monkey HTTP Server is internet-facing or supports business-critical services. Otherwise, handle through normal vulnerability management with confirmation of configuration exposure. Mitigation focus: Upgrade Monkey HTTP Server to version 1.5.3 or later where feasible.; If upgrade timing is unclear, review the vendor announcement and commit.; Disable FDT or custom error messages if vendor guidance supports it..

Prepared

Jun 14, 2026, 13:53 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.