VDB
CVE-2020-37182
CVE-2020-37182
PUBLISHED
CVSS 7.5 HIGH
Redir 3.3 contains a stack overflow vulnerability in the doproxyconnect() function that allows attackers to crash the application by sending oversized input. Attackers can exploit the sprintf() buffer without proper length checking to overwrite memory and cause a segmentation fault, resulting in program termination.
EPSS 0.48% · 39.3th percentile
Risk Scores
CVSS 3.1
7.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
EPSS Score
0.48%
39.3th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Ubuntu:22.04:LTS | redir | 0, 3.3-1 |
| Ubuntu:16.04:LTS | redir | 0, 2.2.1-13 |
| Ubuntu:18.04:LTS | redir | 0, 3.1-1 |
| Ubuntu:20.04:LTS | redir | 3.2-1, 0 |
| Ubuntu:24.04:LTS | redir | 0, 3.3-1 |
| Ubuntu:25.10 | redir | 0, 3.3-1 |
Timeline
- Feb 11, 2026 CVE Published
- Feb 11, 2026 CVE Updated
- Feb 12, 2026 EPSS Score
- Feb 14, 2026 EPSS Score
- Feb 16, 2026 EPSS Score
- Feb 18, 2026 EPSS Score
- Feb 21, 2026 EPSS Score
- Feb 23, 2026 EPSS Score
- Feb 25, 2026 EPSS Score
- Feb 27, 2026 EPSS Score
- Mar 1, 2026 EPSS Score
- Mar 3, 2026 EPSS Score
References
- https://ubuntu.com/security/CVE-2020-37182 third-party-advisory
- https://www.cve.org/CVERecord?id=CVE-2020-37182 third-party-advisory
- https://www.exploit-db.com/exploits/47919 third-party-advisory
- https://github.com/troglobit/redir third-party-advisory
- https://www.vulncheck.com/advisories/redir-denial-of-service third-party-advisory