| タイトル | D-Link DIR822A_101 A_101 Out-of-bounds Write |
|---|
| 説明 | An out-of-bounds write vulnerability exists in the L2TP control message parser of D-Link DIR-822A. When the device is configured to use L2TP or L2TPv6 WAN connectivity, a malicious upstream L2TP server or an attacker able to spoof or intercept the remote peer can send a crafted control packet containing an oversized Host Name AVP and trigger memory corruption during tunnel setup.
The bug affects both the IPv4 and IPv6 L2TP parser variants shipped in the DIR-822A GPL source tree. |
|---|
| ソース | ⚠️ https://tzh00203.notion.site/D-Link-DIR-822A-L2TP-Host-Name-AVP-Out-of-Bounds-Write-33cb5c52018a80a7af5fdc1af3d5aa73 |
|---|
| ユーザー | tian (UID 93438) |
|---|
| 送信 | 2026年07月27日 11:30 (1 月 ago) |
|---|
| モデレーション | 2026年09月07日 20:44 (1 month later) |
|---|
| ステータス | 承諾済み |
|---|
| VulDBエントリ | 399663 [D-Link DIR-822A A_101 L2TP Control Message Parser tunnel_set_params メモリ破損] |
|---|
| ポイント | 17 |
|---|