| عنوان | D-Link DIR822A_101 A_101 Out-of-bounds Write |
|---|
| الوصف | An out-of-bounds write vulnerability exists in the L2TP control message parser of D-Link DIR-822A. When the device is configured to use L2TP or L2TPv6 WAN connectivity, a malicious upstream L2TP server or an attacker able to spoof or intercept the remote peer can send a crafted control packet containing an oversized Host Name AVP and trigger memory corruption during tunnel setup.
The bug affects both the IPv4 and IPv6 L2TP parser variants shipped in the DIR-822A GPL source tree. |
|---|
| المصدر | ⚠️ https://tzh00203.notion.site/D-Link-DIR-822A-L2TP-Host-Name-AVP-Out-of-Bounds-Write-33cb5c52018a80a7af5fdc1af3d5aa73 |
|---|
| المستخدم | tian (UID 93438) |
|---|
| ارسال | 27/07/2026 11:30 AM (1 شهر منذ) |
|---|
| الاعتدال | 07/09/2026 08:44 PM (1 month later) |
|---|
| الحالة | تمت الموافقة |
|---|
| إدخال VulDB | 399663 [D-Link DIR-822A A_101 L2TP Control Message Parser tunnel_set_params تلف الذاكرة] |
|---|
| النقاط | 17 |
|---|