Need to mitigate CVE-2023-20109 from CISCO ASR 1002-X

[RICHA PRIYA]

Current IOS: asr1002x-universalk9.17.06.05.SPA.bin

Suggested IOS: asr1002x-universalk9.17.09.04a.SPA.bin.

Please let us know whether suggested IOS for ASR 1002 router is bug free in terms of the Get VPN functionality which is running in the ASR router.

DR-N10-KS-2#show running-config | include crypto gdoi|gkm group

crypto gdoi group GetvpnGrp2

crypto gdoi group GetvpnGrp3

crypto gdoi group GetvpnGrp5

crypto gdoi group GetvpnGrp30

crypto gdoi group GetvpnGrp50

crypto gdoi group GetvpnGrp200

crypto gdoi group GetvpnGrp500

DR-N10-KS-2#

[Leo Laohoo]

Please read Cisco IOS and IOS XE Software Cisco Group Encrypted Transport VPN Software Out-of-Bounds Write Vulnerability.