Record summary

CVE-2020-37182 has a selected CVSS score of 8.7 (high); EIP currently links 1 catalogued exploit.

Description

Redir 3.3 contains a stack overflow vulnerability in the doproxyconnect() function that allows attackers to crash the application by sending oversized input. Attackers can exploit the sprintf() buffer without proper length checking to overwrite memory and cause a segmentation fault, resulting in program termination.

Description source: CVE List

Exploitation context

Available material

Catalogued exploits
1

CISA SSVC decision

ExploitationPoC
AutomatableYes
Technical impactPartial

CISA Coordinator · SSVC 2.0.3 · Evaluated Feb 12, 2026 · Source: CVE List

Affected products and versions

1
ProductSourceVersion rangeStatus
CVE List3.3affected

Proofs of concept

1

Catalogued exploits

ExploitDBRedir 3.3 - Denial of Service (PoC)ExploitDB exploitby hieublNot analyzed1 file
ExploitDB

PoC details

References

4