CSCvm09121 - Evaluation of IOS-XE for CVE-2018-5391 (FragmentSmack)

[AlexUglev]

Are IOS XE 3.x software releases affected by this vulnerability or only IOS XE 16.x releases?

Does this vulnerability impact also on firmware releases (ROMMON) or only on IOS XE software releases?

[Seb Rupik · Accepted solution]

Hi there,

See the parent advisory:

https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180824-linux-ip-fragment

The vulnerability only covers systems running the Linux kernel 3.9 or later, therefore neither IOS-XE running 3.x.x (running linux kernel 2.6.x) or ROMMON (totally different architecture) are affected.

You can confirm the IOS-XE 3.x.x linux version by looking at the “Open Source Documentation” released with each version.

Cheers,

Seb.