| Title | D-Link DIR822A_101 A_101 Out-of-bounds Write |
|---|
| Description | An out-of-bounds write vulnerability exists in the L2TP control message parser of D-Link DIR-822A. When the device is configured to use L2TP or L2TPv6 WAN connectivity, a malicious upstream L2TP server or an attacker able to spoof or intercept the remote peer can send a crafted control packet containing an oversized Host Name AVP and trigger memory corruption during tunnel setup.
The bug affects both the IPv4 and IPv6 L2TP parser variants shipped in the DIR-822A GPL source tree. |
|---|
| Source | ⚠️ https://tzh00203.notion.site/D-Link-DIR-822A-L2TP-Host-Name-AVP-Out-of-Bounds-Write-33cb5c52018a80a7af5fdc1af3d5aa73 |
|---|
| User | tian (UID 93438) |
|---|
| Submission | 07/27/2026 11:30 (2 months ago) |
|---|
| Moderation | 09/07/2026 20:44 (1 month later) |
|---|
| Status | Accepted |
|---|
| VulDB entry | 399663 [D-Link DIR-822A A_101 L2TP Control Message Parser tunnel_set_params out-of-bounds write] |
|---|
| Points | 17 |
|---|