Fortra BoKS Manager versions from 8.1.0.0 through 8.1.0.23 and 9.0.0.0 through 9.0.0.6 contain an out-of-bounds read vulnerability (CWE-125) in the custom TLS ClientHello parser within the boks_portmux component. This vulnerability allows a remote unauthenticated attacker to submit a malformed TLS ClientHello message that causes the boks_portmux daemon to crash. The service usually restarts automatically, but repeated malformed requests can maintain service interruption, resulting in a denial-of-service impact. The CVSS 3.1 base score is 7.5, indicating high severity with network attack vector, low attack complexity, no privileges required, no user interaction, unchanged scope, no confidentiality or integrity impact, but high availability impact.

The vulnerability can be exploited remotely without authentication to cause a denial-of-service by crashing the boks_portmux daemon. While the service normally restarts automatically, an attacker can sustain the outage by repeatedly sending malformed ClientHello messages, impacting service availability. There is no impact on confidentiality or integrity.

No patch or official fix information is provided in the available data. Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, consider implementing network-level protections to limit exposure of the boks_portmux service to untrusted sources to reduce the risk of sustained denial-of-service.