| Название | D-Link DIR822A_101 A_101 Out-of-bounds Write |
|---|
| Описание | An out-of-bounds write vulnerability exists in the L2TP control message parser of D-Link DIR-822A. When the device is configured to use L2TP or L2TPv6 WAN connectivity, a malicious upstream L2TP server or an attacker able to spoof or intercept the remote peer can send a crafted control packet containing an oversized Host Name AVP and trigger memory corruption during tunnel setup.
The bug affects both the IPv4 and IPv6 L2TP parser variants shipped in the DIR-822A GPL source tree. |
|---|
| Источник | ⚠️ https://tzh00203.notion.site/D-Link-DIR-822A-L2TP-Host-Name-AVP-Out-of-Bounds-Write-33cb5c52018a80a7af5fdc1af3d5aa73 |
|---|
| Пользователь | tian (UID 93438) |
|---|
| Представление | 27.07.2026 11:30 (1 месяц назад) |
|---|
| Модерация | 07.09.2026 20:44 (1 month later) |
|---|
| Статус | принято |
|---|
| Запись VulDB | 399663 [D-Link DIR-822A A_101 L2TP Control Message Parser tunnel_set_params повреждение памяти] |
|---|
| Баллы | 17 |
|---|