Skip to content
OpenAdvisories
High · 7.5 CVE-2026-79896 EUVD-2026-90881GHSA-h5vq-j79p-4xf3

Fortra BoKS Manager boks_portmux TLS ClientHello out-of-bounds read vulnerability

Published Oct 1, 2026 · Updated Oct 1, 2026 · Assigned by Fortra

Description

Fortra BoKS Manager contains an out-of-bounds read vulnerability in the custom TLS ClientHello parser used by boks_portmux. A remote unauthenticated attacker can submit a malformed ClientHello and terminate boks_portmux. Although the daemon is normally restarted automatically, repeated requests can sustain the service interruption.

Affected products

VendorProductAffectedFixed
Fortra BoKS Manager 8.1.0.0 – ≤ 8.1.0.23, 9.0.0.0 – ≤ 9.0.0.6 —

References