CVE-2020-37182

8.7 highEPSS 0.6%

High (8.7). EPSS 0.6% chance of exploitation in the next 30 days.

Redir 3.3 contains a stack overflow vulnerability in the doproxyconnect() function that allows attackers to crash the application by sending oversized input. Attackers can exploit the sprintf() buffer without proper length checking to overwrite memory and cause a segmentation fault, resulting in program termination.

Severity

CVSS 4.0

8.7 high

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N

CVSS 3.1

7.5 high

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

EPSS: 0.6% chance of exploitation in the next 30 days; higher than 46% of CVEs (scores of 2026-10-31)
CWE: CWE-121
Published: 2026-02-11
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

References

https://github.com/troglobit/redir
https://www.exploit-db.com/exploits/47919
https://www.vulncheck.com/advisories/redir-denial-of-service

Check your stack JSON