High
Heap buffer overflow in boks_sshd revoked-key error handling
The revoked-key error path builds a human-readable failure reason using sprintf() into a heap buffer. The allocated buffer is too small for the final formatted message. When sprintf() writes the full message, it can write past the end of the heap allocation.
Announced Source revision 1
Original source ↗CVE-2026-14316
Primary source · Revision 1
Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.
Security context
Source reference: cve:CVE-2026-14316
Core Privileged Access Manager (BoKS)
Source reference: /containers/cna/affected/0/product
- Affected versions
- Not stated in this record
- Fixed versions
- Not stated in this record
- Prerequisites
- Not stated in this record
Structured affected-version data
Original package identities and version rules from this source.
[
{
"vendor": "Fortra",
"product": "Core Privileged Access Manager (BoKS)",
"versions": [
{
"status": "affected",
"version": "8.1.0.0",
"lessThan": "8.1.0.30",
"versionType": "custom"
},
{
"status": "affected",
"version": "10.1.0.0",
"lessThan": "10.1.1.0",
"versionType": "custom"
}
],
"defaultStatus": "unknown"
}
]- Related CVEs
- CVE-2026-14316
Source reference:
/cveMetadata/cveId
Publisher severity
high
Source reference: /containers/cna/metrics
- Event
- #5694 · Revision 1
- Added to Heist Feed
- Publisher date