Description (CNA)
Fortra BoKS Manager contains an out-of-bounds read vulnerability in the custom TLS ClientHello parser used by boks_portmux. A remote unauthenticated attacker can submit a malformed ClientHello and terminate boks_portmux. Although the daemon is normally restarted automatically, repeated requests can sustain the service interruption.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Fortra / BoKS Manager | affected 8.1.0.0 through 8.1.0.23; affected 9.0.0.0 through 9.0.0.6 |
CWE
CWE-125
References
ADP enrichment
No English description supplied.
No references supplied.