CSCvm15495 - Evaluation of positron for CVE-2018-5391 (FragmentSmack)

[alclark10]

Is there a fix for this? If not, when does Cisco expect to release a fix?

[alclark10]

I'm under the impression that Cisco employees monitor these discussions. If that's the case, please reply to the questions.

[andrew.munday]

I'm also wondering the same. We have upgraded to 2.2 with patch 12, does this overcome the vulnerability? No mention of this in the release notes.

[Pawel Przybyszewski]

Hello,

Nothing updated from December of 2018. Do you know if version 2.6 patch 1 is also vulnerable?

Known Affected Releases are from 2.1 to 2.5 version.

Reagards

Pawel

[Greeners84]

Anybody had an update on this vulnerability? Still no 'known fixed release'.