Multiple Vulnerabilities in OpenSSL Affecting Cisco Products: May 2016

[GSC.SG.Infra DD]

Hi Team,

in refer to https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160504-openssl, any specific reason for the bug on ASA CSCuz52474 not visible to partner cco while the rest device bug are fine?

Insufficient Permissions to View Bug

[Aditya Ganjoo]

Hi,

This is an internal bug and is still not fixed.

That is the reason you are not able to view it.

Regards,

Aditya

Please rate helpful posts and mark correct answers.

[GSC.SG.Infra DD]

Hi

Thanks for your reply, is there any timeline for releasing this bug info?

[Aditya Ganjoo]

Hi,

This is still being worked on by the developers.

And we expect a fix soon on this.

Apologies but I do not have the exact ETA for this.

Regards,

Aditya

Please rate helpful posts and mark correct answers.

[j.fogarty]

Hi,

I am running iOS 9.1(7) on an ASA5550. Is this version of software susceptible to this vulnerability and if so, will there be a patch to fix it? One of our engineers is telling me it will not be corrected and we need to upgrade to an ASA5555-X.

Thank you

[santosh.lakshminarayana1]

Hi,

I see 9.2(4.11) is in the known fixed releases of this bug. Is this meant to be 9.4(2)11, the Cisco currently advised interim release? There is no version 9.2(4.11) available on the downloads page of the Cisco website.

Regards,

Santosh

[Aditya Ganjoo]

Hi Santosh,

9.4.3.2 has the fix for this bug.

You can upgrade to 9.4.3.2 from 9.4.x to avoid this bug.

Regards,

Aditya

Please rate helpful posts and mark correct answers.

[kerstin-534]

Hi,

is there a FIX for ASA 9.1(7) (if this is affected).

br Fritz

[Christian Jorge]

Same question, no answer so far.

Also need to know about ASA 9.1(7)

Christian

[richard-ziga]

This bug showed up in a vulnerability scan on system image 9.4.4.17

Is this correct or is something wrong with the scan?

Rich