CSCuy47382 - Cisco IOS and IOS XE Software IKEv1 1 Fragmentation Denial of Service Vulnerability - 1

[searthrowl]

Hello, is release c2900-universalk9-mz.SPA.155-3.M5.bin affected by this bug? I can see M6a is fixed, but it's not clear if this release has the bug or not.

[Leo Laohoo · Accepted solution]

Check the Release Notes for 15.5(6)M6 if this Bug ID is in the Resolved Caveats section.

[searthrowl]

Many thanks - I hoped (wrongly) that not being vulnerable meant is was OK.

The correct adoption, as pointed out, is: It's fixed when is says it is.