CVE-2026-79896

Summary

Fortra BoKS Manager has an out-of-bounds read vulnerability in its TLS ClientHello parser that can cause the boks_portmux daemon to crash and restart, leading to service interruption. This allows remote attackers to disrupt the service without authentication.

Exploitability

Exploitation is relatively straightforward as attackers only need to send a malformed TLS ClientHello to trigger the out-of-bounds read, requiring no authentication or user interaction.

Blast radius

The impact is moderate as repeated exploitation attempts can sustain service interruption, but the daemon automatically restarts, limiting persistent damage.

Detection

Monitor for boks_portmux process crashes and restarts in system logs, particularly around TLS handshake attempts from external IP addresses.

Prioritized remediation

Upgrade to BoKS Manager version 2.590 or later to address this vulnerability.

Analysis generated locally by garnet-coder (no data left the box). AI-assisted — verify against primary sources before acting.