CVE-2026-79896 - Vulnerability Details - OpenCVE

Fortra BoKS Manager contains an out-of-bounds read vulnerability in the custom TLS ClientHello parser used by boks_portmux. A remote unauthenticated attacker can submit a malformed ClientHello and terminate boks_portmux. Although the daemon is normally restarted automatically, repeated requests can sustain the service interruption.

No CVSS v4.0

Attack Vector Network

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact None

Integrity Impact None

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Exploitation none

Automatable yes

Technical Impact partial

Vendors	Products
Fortra	Boks Manager

No data.

No data.

References

Link	Providers
https://www.fortra.com/security/advisories/product-security/fi-2026-016

History

Fri, 02 Oct 2026 09:30:00 +0000

Type	Values Removed	Values Added
Metrics		ssvc `{'options': {'Automatable': 'yes', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}`

Thu, 01 Oct 2026 20:00:00 +0000

Type	Values Removed	Values Added
First Time appeared		Fortra Fortra boks Manager
Vendors & Products		Fortra Fortra boks Manager

Thu, 01 Oct 2026 15:30:00 +0000

Type	Values Removed	Values Added
Description		Fortra BoKS Manager contains an out-of-bounds read vulnerability in the custom TLS ClientHello parser used by boks_portmux. A remote unauthenticated attacker can submit a malformed ClientHello and terminate boks_portmux. Although the daemon is normally restarted automatically, repeated requests can sustain the service interruption.
Title		Fortra BoKS Manager boks_portmux TLS ClientHello out-of-bounds read vulnerability
Weaknesses		CWE-125
References		https://www.fortra.com/security/advisories/product-security/fi-2026-016
Metrics		cvssV3_1 `{'score': 7.5, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'}`

MITRE

Status: PUBLISHED

Assigner: Fortra

Published: 2026-10-01T15:09:21.099Z

Updated: 2026-10-01T16:02:49.186Z

Reserved: 2026-08-25T14:50:07.493Z

Link: CVE-2026-79896

Vulnrichment

Updated: 2026-10-01T16:02:45.807Z

NVD

Status : Awaiting Analysis

Published: 2026-10-01T16:17:59.940

Modified: 2026-10-01T20:34:26.287

Link: CVE-2026-79896

Redhat

No data.

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-79896", "assignerOrgId": "df4dee71-de3a-4139-9588-11b62fe6c0ff", "state": "PUBLISHED", "assignerShortName": "Fortra", "dateReserved": "2026-08-25T14:50:07.493Z", "datePublished": "2026-10-01T15:09:21.099Z", "dateUpdated": "2026-10-01T16:02:49.186Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "df4dee71-de3a-4139-9588-11b62fe6c0ff", "shortName": "Fortra", "dateUpdated": "2026-10-01T15:09:21.099Z"}, "title": "Fortra BoKS Manager boks_portmux TLS ClientHello out-of-bounds read vulnerability", "problemTypes": [{"descriptions": [{"lang": "en", "cweId": "CWE-125", "description": "CWE-125 Out-of-bounds read", "type": "CWE"}]}], "impacts": [{"capecId": "CAPEC-125", "descriptions": [{"lang": "en", "value": "CAPEC-125 Flooding"}]}], "affected": [{"vendor": "Fortra", "product": "BoKS Manager", "modules": ["boks_portmux"], "versions": [{"status": "affected", "version": "8.1.0.0", "lessThanOrEqual": "8.1.0.23", "versionType": "custom"}, {"status": "affected", "version": "9.0.0.0", "lessThanOrEqual": "9.0.0.6", "versionType": "custom"}], "defaultStatus": "unknown"}], "descriptions": [{"lang": "en", "value": "Fortra BoKS Manager contains an out-of-bounds read vulnerability in the custom TLS ClientHello parser used by boks_portmux. A remote unauthenticated attacker can submit a malformed ClientHello and terminate boks_portmux. Although the daemon is normally restarted automatically, repeated requests can sustain the service interruption.", "supportingMedia": [{"type": "text/html", "base64": false, "value": "Fortra BoKS Manager contains an out-of-bounds read vulnerability in the custom TLS ClientHello parser used by boks_portmux. A remote unauthenticated attacker can submit a malformed ClientHello and terminate boks_portmux. Although the daemon is normally restarted automatically, repeated requests can sustain the service interruption."}]}], "references": [{"url": "https://www.fortra.com/security/advisories/product-security/fi-2026-016"}], "metrics": [{"format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}], "cvssV3_1": {"version": "3.1", "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "availabilityImpact": "HIGH", "baseSeverity": "HIGH", "baseScore": 7.5, "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"}}], "workarounds": [{"lang": "en", "value": "Until a fixed release is installed, restrict network access to boks_portmux listeners to trusted systems.", "supportingMedia": [{"type": "text/html", "base64": false, "value": "Until a fixed release is installed, restrict network access to boks_portmux listeners to trusted systems."}]}], "solutions": [{"lang": "en", "value": "Upgrade to boks-server 8.1.0.24 or boks-server 9.0.0.7.", "supportingMedia": [{"type": "text/html", "base64": false, "value": "Upgrade to boks-server 8.1.0.24 or boks-server 9.0.0.7."}]}], "source": {"discovery": "INTERNAL"}, "x_generator": {"engine": "Vulnogram 1.0.5"}}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2026-10-01T16:02:42.850473Z", "id": "CVE-2026-79896", "options": [{"Exploitation": "none"}, {"Automatable": "yes"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-10-01T16:02:49.186Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2026-79896", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "yes"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2026-10-01T16:02:42.850473Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-10-01T16:02:45.807Z"}}], "cna": {"title": "Fortra BoKS Manager boks_portmux TLS ClientHello out-of-bounds read vulnerability", "source": {"discovery": "INTERNAL"}, "impacts": [{"capecId": "CAPEC-125", "descriptions": [{"lang": "en", "value": "CAPEC-125 Flooding"}]}], "metrics": [{"format": "CVSS", "cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.5, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "NONE"}, "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "affected": [{"vendor": "Fortra", "modules": ["boks_portmux"], "product": "BoKS Manager", "versions": [{"status": "affected", "version": "8.1.0.0", "versionType": "custom", "lessThanOrEqual": "8.1.0.23"}, {"status": "affected", "version": "9.0.0.0", "versionType": "custom", "lessThanOrEqual": "9.0.0.6"}], "defaultStatus": "unknown"}], "solutions": [{"lang": "en", "value": "Upgrade to boks-server 8.1.0.24 or boks-server 9.0.0.7.", "supportingMedia": [{"type": "text/html", "value": "Upgrade to boks-server 8.1.0.24 or boks-server 9.0.0.7.", "base64": false}]}], "references": [{"url": "https://www.fortra.com/security/advisories/product-security/fi-2026-016"}], "workarounds": [{"lang": "en", "value": "Until a fixed release is installed, restrict network access to boks_portmux listeners to trusted systems.", "supportingMedia": [{"type": "text/html", "value": "Until a fixed release is installed, restrict network access to boks_portmux listeners to trusted systems.", "base64": false}]}], "x_generator": {"engine": "Vulnogram 1.0.5"}, "descriptions": [{"lang": "en", "value": "Fortra BoKS Manager contains an out-of-bounds read vulnerability in the custom TLS ClientHello parser used by boks_portmux. A remote unauthenticated attacker can submit a malformed ClientHello and terminate boks_portmux. Although the daemon is normally restarted automatically, repeated requests can sustain the service interruption.", "supportingMedia": [{"type": "text/html", "value": "Fortra BoKS Manager contains an out-of-bounds read vulnerability in the custom TLS ClientHello parser used by boks_portmux. A remote unauthenticated attacker can submit a malformed ClientHello and terminate boks_portmux. Although the daemon is normally restarted automatically, repeated requests can sustain the service interruption.", "base64": false}]}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-125", "description": "CWE-125 Out-of-bounds read"}]}], "providerMetadata": {"orgId": "df4dee71-de3a-4139-9588-11b62fe6c0ff", "shortName": "Fortra", "dateUpdated": "2026-10-01T15:09:21.099Z"}}}, "cveMetadata": {"cveId": "CVE-2026-79896", "state": "PUBLISHED", "dateUpdated": "2026-10-01T16:02:49.186Z", "dateReserved": "2026-08-25T14:50:07.493Z", "assignerOrgId": "df4dee71-de3a-4139-9588-11b62fe6c0ff", "datePublished": "2026-10-01T15:09:21.099Z", "assignerShortName": "Fortra"}, "dataVersion": "5.2"}