Description
Fortra BoKS Manager contains an out-of-bounds read vulnerability in the custom TLS ClientHello parser used by boks_portmux. A remote unauthenticated attacker can submit a malformed ClientHello and terminate boks_portmux. Although the daemon is normally restarted automatically, repeated requests can sustain the service interruption.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Fortra | BoKS Manager | 8.1.0.0 – ≤ 8.1.0.23, 9.0.0.0 – ≤ 9.0.0.6 | — |