Vulnerability · Published Feb 11, 2026 · Assigned by VulnCheck
CVE-2020-37182Redir 3.3 - Denial of Service
High 7.5
In plain English
A high-severity stack buffer overflow in Redir from troglobit. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 0.6% (higher than 46% of all known vulnerabilities).
Severity (CVSS 3.1)7.5High
Exploit odds (30 days)0.6%top 53.6% of all CVEs
Exploited in the wildNo reportsCISA SSVC: poc
Attack toolingNoneno public tooling known
Official description
Redir 3.3 contains a stack overflow vulnerability in the doproxyconnect() function that allows attackers to crash the application by sending oversized input. Attackers can exploit the sprintf() buffer without proper length checking to overwrite memory and cause a segmentation fault, resulting in program termination.
Affected packages & fixed versions
| Ecosystem | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian:12 | redir | no fix listed | DEBIAN-CVE-2020-37182 |
| Debian:13 | redir | no fix listed | DEBIAN-CVE-2020-37182 |
| Debian:14 | redir | no fix listed | DEBIAN-CVE-2020-37182 |
| Ubuntu:22.04:LTS | redir | no fix listed | UBUNTU-CVE-2020-37182 |
| Ubuntu:24.04:LTS | redir | no fix listed | UBUNTU-CVE-2020-37182 |
| Ubuntu:25.10 | redir | no fix listed | UBUNTU-CVE-2020-37182 |
| Ubuntu:26.04:LTS | redir | no fix listed | UBUNTU-CVE-2020-37182 |
| Ubuntu:26.10 | redir | no fix listed | UBUNTU-CVE-2020-37182 |
Affected products (as reported)
Weakness: CWE-121 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
References
- ExploitDB-47919 exploit
- Redir Project GitHub Repository product
- VulnCheck Advisory: Redir 3.3 - Denial of Service third-party-advisory