| 제목 | D-Link DIR822A_101 A_101 Out-of-bounds Write |
|---|
| 설명 | An out-of-bounds write vulnerability exists in the L2TP control message parser of D-Link DIR-822A. When the device is configured to use L2TP or L2TPv6 WAN connectivity, a malicious upstream L2TP server or an attacker able to spoof or intercept the remote peer can send a crafted control packet containing an oversized Host Name AVP and trigger memory corruption during tunnel setup.
The bug affects both the IPv4 and IPv6 L2TP parser variants shipped in the DIR-822A GPL source tree. |
|---|
| 원천 | ⚠️ https://tzh00203.notion.site/D-Link-DIR-822A-L2TP-Host-Name-AVP-Out-of-Bounds-Write-33cb5c52018a80a7af5fdc1af3d5aa73 |
|---|
| 사용자 | tian (UID 93438) |
|---|
| 제출 | 2026. 07. 27. AM 11:30 (3 개월 ago) |
|---|
| 모더레이션 | 2026. 09. 07. PM 08:44 (1 month later) |
|---|
| 상태 | 수락 |
|---|
| VulDB 항목 | 399663 [D-Link DIR-822A A_101 L2TP Control Message Parser tunnel_set_params 메모리 손상] |
|---|
| 포인트들 | 17 |
|---|