Bug 2439177 (CVE-2020-37182)

Summary: CVE-2020-37182 redir: Denial of Service due to stack overflow in doproxyconnect() function
Product: [Other] Security Response Reporter: OSIDB Bzimport <bzimport>
Component: vulnerabilityAssignee: Product Security DevOps Team <prodsec-dev>
Status: NEW --- QA Contact:
Severity: high Docs Contact:
Priority: high    
Version: unspecifiedKeywords: Security
Target Milestone: ---   
Target Release: ---   
Hardware: All   
OS: Linux   
Whiteboard:
Fixed In Version: Doc Type: ---
Doc Text:
A flaw was found in redir. A remote attacker can exploit a stack overflow vulnerability in the `doproxyconnect()` function by sending oversized input. This vulnerability, caused by improper length checking in the `sprintf()` function, allows attackers to overwrite memory, leading to a segmentation fault and program termination. This results in a Denial of Service (DoS) for the application.
 Story Points: ---
Clone Of: Environment:
Last Closed: Type: ---
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:
Bug Depends On: 2439285, 2439286    
Bug Blocks:    

Description OSIDB Bzimport 2026-02-11 21:06:28 UTC 
Redir 3.3 contains a stack overflow vulnerability in the doproxyconnect() function that allows attackers to crash the application by sending oversized input. Attackers can exploit the sprintf() buffer without proper length checking to overwrite memory and cause a segmentation fault, resulting in program termination.