CVE-2020-37182 HIGH

CVE-2020-37182: Redir 3.3 - Denial of Service

Vendor Troglobit
Product Redir
Weakness CWE-121
Published February 11, 2026
Last update February 12, 2026

CVSS base score

8.7/10
Attack vector Network
Attack complexity Low
Privileges required None
User interaction None
Confidentiality
Integrity

CVSS vector

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N

What the vulnerability does

01Description

Redir 3.3 contains a stack overflow vulnerability in the doproxyconnect() function that allows attackers to crash the application by sending oversized input. Attackers can exploit the sprintf() buffer without proper length checking to overwrite memory and cause a segmentation fault, resulting in program termination.

Key dates

02Disclosure timeline

February 11, 2026 CVE published
February 12, 2026 Record updated