Heap Overflow in boks_ksllogsd Affects Fortra Products

CVE-2026-79900

What is CVE-2026-79900?

The boks_ksllogsd component of Fortra products is vulnerable to a heap overflow attack. This vulnerability arises when an attacker leverages an authenticated KSL start message to supply a checksum algorithm name that exceeds the designated size. Although the releases validate the digest name using OpenSSL, they fail to ensure that the provided value fits within a limited 16-byte checksum context. As a result, this mismanagement allows overwriting of memory beyond the allocated heap boundary, potentially leading to arbitrary code execution or system compromise.

References