IOS vulnerability

What happened

A vulnerability in the Internet Key Exchange version 2 (IKEv2) feature of Cisco IOS Software, Cisco IOS XE Software, Cisco Secure Firewall Adaptive Security Appliance (ASA) Software, and Cisco Secure Firewall Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to trigger a memory leak, resulting in a denial of service (DoS) condition on an affected device. This vulnerability is due to improper parsing of IKEv2 packets. An attacker could exploit this vulnerability by sending crafted IKEv2 packets to an affected device. A successful exploit of Cisco IOS Software and IOS XE Software could allow the attacker to cause the affected device to reload, resulting in a DoS condition. A successful exploit of Cisco Secure Firewall ASA Software and Secure FTD Software could allow the attacker to partially exhaust system memory, resulting in system instability, such as the inability to establish new IKEv2 VPN sessions. A manual reboot of the device is required to recover from this condition.

Affected versions

IOS: 15.2(1)S; 15.2(2)S; 15.2(1)S1; 15.2(4)S; 15.2(1)S2; 15.2(2)S1; 15.2(2)S2; 15.2(2)S0a; 15.2(2)S0c; 15.2(4)S1; 15.2(4)S4; 15.2(4)S6; 15.2(4)S2; 15.2(4)S5; 15.2(4)S3; 15.2(4)S3a; 15.2(4)S4a; 15.2(4)S7; 15.3(1)T; 15.3(2)T; 15.3(1)T1; 15.3(1)T2; 15.3(1)T3; 15.3(1)T4; 15.3(2)T1; 15.3(2)T2; 15.3(2)T3; 15.3(2)T4; 15.0(2)EY; 15.0(2)EY1; 15.0(2)EY2; 15.0(2)EY3; 15.1(2)S; 15.1(1)S; 15.1(1)S1; 15.1(3)S; 15.1(1)S2; 15.1(2)S1; 15.1(2)S2; 15.1(3)S1; 15.1(3)S0a; 15.1(3)S2; 15.1(3)S4; 15.1(3)S3; 15.1(3)S5; 15.1(3)S6; 15.1(3)S5a; 15.1(4)M3; 15.1(4)M; 15.1(4)M1; 15.1(4)M2; 15.1(4)M6; 15.1(4)M5; 15.1(4)M4; 15.1(4)M7; 15.1(4)M3a; 15.1(4)M10; 15.1(4)M8; 15.1(4)M9; 15.0(2)SE; 15.0(2)SE1; 15.0(2)SE2; 15.0(2)SE3; 15.0(2)SE4; 15.0(2)SE5; 15.0(2)SE6; 15.0(2)SE7; 15.0(2)SE8; 15.0(2)SE9; 15.0(2)SE10; 15.0(2)SE11; 15.0(2)SE10a; 15.0(2)SE12; 15.0(2)SE13; 15.1(2)GC; 15.1(2)GC1; 15.1(2)GC2; 15.1(4)GC; 15.1(4)GC1; 15.1(4)GC2; 15.1(1)SG; 15.1(2)SG; 15.1(1)SG1; 15.1(1)SG2; 15.1(2)SG1; 15.1(2)SG2; 15.1(2)SG3; 15.1(2)SG4; 15.1(2)SG5; 15.1(2)SG6; 15.1(2)SG7; 15.1(2)SG8; 15.2(4)M; 15.2(4)M1; 15.2(4)M2; 15.2(4)M4; 15.2(4)M3; 15.2(4)M5; 15.2(4)M8; 15.2(4)M10; 15.2(4)M7; 15.2(4)M6; 15.2(4)M9; 15.2(4)M6a; 15.2(4)M11; 15.2(1)GC; 15.2(1)GC1; 15.2(1)GC2; 15.2(2)GC; 15.2(3)GC; 15.2(3)GC1; 15.2(4)GC; 15.2(4)GC1; 15.2(4)GC2; 15.2(4)GC3; 15.1(1)SY; 15.1(1)SY1; 15.1(2)SY; 15.1(2)SY1; 15.1(2)SY2; 15.1(1)SY2; 15.1(1)SY3; 15.1(2)SY3; 15.1(1)SY4; 15.1(2)SY4; 15.1(1)SY5; 15.1(2)SY5; 15.1(2)SY4a; 15.1(1)SY6; 15.1(2)SY6; 15.1(2)SY7; 15.1(2)SY8; 15.1(2)SY9; 15.1(2)SY10; 15.1(2)SY11; 15.1(2)SY12; 15.1(2)SY13; 15.1(2)SY14; 15.1(2)SY15; 15.1(2)SY16; 15.3(1)S; 15.3(2)S; 15.3(3)S; 15.3(1)S2; 15.3(1)S1; 15.3(2)S2; 15.3(2)S1; 15.3(3)S1; 15.3(3)S2; 15.3(3)S3; 15.3(3)S6; 15.3(3)S4; 15.3(3)S1a; 15.3(3)S5; 15.3(3)S7; 15.3(3)S8; 15.3(3)S9; 15.3(3)S10; 15.3(3)S8a; 15.4(1)T; 15.4(2)T; 15.4(1)T2; 15.4(1)T1; 15.4(1)T3; 15.4(2)T1; 15.4(2)T3; 15.4(2)T2; 15.4(1)T4; 15.4(2)T4; 15.0(2)EA; 15.0(2)EA1; 15.2(1)E; 15.2(2)E; 15.2(1)E1; 15.2(3)E; 15.2(1)E2; 15.2(1)E3; 15.2(2)E1; 15.2(4)E; 15.2(3)E1; 15.2(2)E2; 15.2(2a)E1; 15.2(2)E3; 15.2(2a)E2; 15.2(3)E2; 15.2(3a)E; 15.2(3)E3; 15.2(4)E1; 15.2(2)E4; 15.2(2)E5; 15.2(4)E2; 15.2(3)E4; 15.2(5)E; 15.2(4)E3; 15.2(2)E6; 15.2(5a)E; 15.2(5)E1; 15.2(5b)E; 15.2(2)E5a; 15.2(5c)E; 15.2(2)E5b; 15.2(5a)E1; 15.2(4)E4; 15.2(2)E7; 15.2(5)E2; 15.2(6)E; 15.2(4)E5; 15.2(5)E2c; 15.2(2)E8; 15.2(6)E0a; 15.2(6)E1; 15.2(6)E0c; 15.2(4)E6; 15.2(6)E2; 15.2(2)E9; 15.2(4)E7; 15.2(7)E; 15.2(2)E10; 15.2(4)E8; 15.2(6)E2a; 15.2(6)E2b; 15.2(7)E1; 15.2(7)E0a; 15.2(7)E0b; 15.2(7)E0s; 15.2(6)E3; 15.2(4)E9; 15.2(7)E2; 15.2(7a)E0b; 15.2(4)E10; 15.2(7)E3; 15.2(7)E1a; 15.2(7b)E0b; 15.2(7)E2a; 15.2(4)E10a; 15.2(7)E4; 15.2(7)E3k; 15.2(8)E; 15.2(8)E1; 15.2(7)E5; 15.2(7)E6; 15.2(8)E2; 15.2(4)E10d; 15.2(7)E7; 15.2(8)E3; 15.2(7)E8; 15.2(8)E4; 15.2(7)E9; 15.2(8)E5; 15.2(8)E6; 15.2(7)E10; 15.2(7)E11; 15.2(8)E7; 15.2(7)E12; 15.2(8)E8; 15.2(7)E13; 15.2(2)JB; 15.2(2)JB2; 15.2(4)JB; 15.2(2)JB3; 15.2(4)JB1; 15.2(4)JB3; 15.2(4)JB3a; 15.2(2)JB4; 15.2(4)JB4; 15.2(4)JB3b; 15.2(4)JB3s; 15.2(4)JB5; 15.2(4)JB5m; 15.2(4)JB6; 15.2(2)JB5; 15.2(2)JB6; 15.4(1)S; 15.4(2)S; 15.4(3)S; 15.4(1)S1; 15.4(1)S2; 15.4(2)S1; 15.4(1)S3; 15.4(3)S1; 15.4(2)S2; 15.4(3)S2; 15.4(3)S3; 15.4(1)S4; 15.4(2)S3; 15.4(2)S4; 15.4(3)S4; 15.4(3)S5; 15.4(3)S6; 15.4(3)S7; 15.4(3)S6a; 15.4(3)S8; 15.4(3)S9; 15.4(3)S10; 15.2(2)JAX; 15.3(3)M; 15.3(3)M1; 15.3(3)M2; 15.3(3)M3; 15.3(3)M5; 15.3(3)M4; 15.3(3)M6; 15.3(3)M7; 15.3(3)M8; 15.3(3)M9; 15.3(3)M10; 15.3(3)M8a; 15.2(1)EY; 15.0(2)EJ; 15.0(2)EJ1; 15.2(1)SY; 15.2(1)SY1; 15.2(1)SY0a; 15.2(1)SY2; 15.2(2)SY; 15.2(1)SY1a; 15.2(2)SY1; 15.2(2)SY2; 15.2(1)SY3; 15.2(1)SY4; 15.2(2)SY3; 15.2(1)SY5; 15.2(1)SY6; 15.2(1)SY7; 15.2(1)SY8; 15.2(5)EX; 15.0(2)EK; 15.0(2)EK1; 15.4(1)CG; 15.4(1)CG1; 15.4(2)CG; 15.5(1)S; 15.5(2)S; 15.5(1)S1; 15.5(3)S; 15.5(1)S2; 15.5(1)S3; 15.5(2)S1; 15.5(2)S2; 15.5(3)S1; 15.5(3)S1a; 15.5(2)S3; 15.5(3)S2; 15.5(3)S0a; 15.5(3)S3; 15.5(1)S4; 15.5(2)S4; 15.5(3)S4; 15.5(3)S5; 15.5(3)S6; 15.5(3)S6a; 15.5(3)S7; 15.5(3)S6b; 15.5(3)S8; 15.5(3)S9; 15.5(3)S10; 15.5(3)S9a; 15.5(1)T; 15.5(1)T1; 15.5(2)T; 15.5(1)T2; 15.5(1)T3; 15.5(2)T1; 15.5(2)T2; 15.5(2)T3; 15.5(2)T4; 15.5(1)T4; 15.2(2)EA; 15.2(2)EA1; 15.2(2)EA2; 15.2(3)EA; 15.2(4)EA; 15.2(4)EA1; 15.2(2)EA3; 15.2(4)EA3; 15.2(5)EA; 15.2(4)EA4; 15.2(4)EA5; 15.2(4)EA6; 15.2(4)EA7; 15.2(4)EA8; 15.2(4)EA9; 15.2(4)EA9a; 15.3(3)JN8; 15.5(3)M; 15.5(3)M1; 15.5(3)M0a; 15.5(3)M2; 15.5(3)M3; 15.5(3)M4; 15.5(3)M4a; 15.5(3)M5; 15.5(3)M6; 15.5(3)M7; 15.5(3)M6a; 15.5(3)M8; 15.5(3)M9; 15.5(3)M10; 15.3(3)JA; 15.3(3)JA1m; 15.3(3)JA1; 15.3(3)JA4; 15.3(3)JA5; 15.3(3)JA6; 15.3(3)JA7; 15.3(3)JA8; 15.3(3)JA10; 15.3(3)JAA; 15.3(3)JAB; 15.3(3)JB; 15.5(3)SN; 15.6(1)S; 15.6(2)S; 15.6(2)S1; 15.6(1)S1; 15.6(1)S2; 15.6(2)S2; 15.6(1)S3; 15.6(2)S3; 15.6(1)S4; 15.6(2)S4; 15.6(1)T; 15.6(2)T; 15.6(1)T0a; 15.6(1)T1; 15.6(2)T1; 15.6(1)T2; 15.6(2)T2; 15.6(1)T3; 15.6(2)T3; 15.3(3)JNB3; 15.3(3)JAX; 15.3(3)JAX1; 15.3(3)JAX2; 15.3(3)JBB; 15.3(3)JBB1; 15.3(3)JBB2; 15.3(3)JBB4; 15.3(3)JBB5; 15.3(3)JBB6; 15.3(3)JC; 15.3(3)JC1; 15.3(3)JC2; 15.3(3)JC3; 15.3(3)JC4; 15.3(3)JC5; 15.3(1)SY; 15.3(1)SY1; 15.3(1)SY2; 15.6(2)SP; 15.6(2)SP1; 15.6(2)SP2; 15.6(2)SP3; 15.6(2)SP4; 15.6(2)SP5; 15.6(2)SP6; 15.6(2)SP7; 15.6(2)SP8; 15.6(2)SP9; 15.6(2)SN; 15.3(3)JD; 15.3(3)JD2; 15.6(3)M; 15.6(3)M1; 15.6(3)M0a; 15.6(3)M1b; 15.6(3)M2; 15.6(3)M2a; 15.6(3)M3; 15.6(3)M3a; 15.6(3)M4; 15.6(3)M5; 15.6(3)M6; 15.6(3)M7; 15.6(3)M6a; 15.6(3)M6b; 15.6(3)M8; 15.6(3)M9; 15.2(4)EC1; 15.2(4)EC2; 15.4(1)SY; 15.4(1)SY1; 15.4(1)SY2; 15.4(1)SY3; 15.4(1)SY4; 15.5(1)SY; 15.5(1)SY1; 15.5(1)SY2; 15.5(1)SY3; 15.5(1)SY4; 15.5(1)SY5; 15.5(1)SY6; 15.5(1)SY7; 15.5(1)SY8; 15.5(1)SY9; 15.5(1)SY10; 15.5(1)SY11; 15.5(1)SY12; 15.5(1)SY13; 15.5(1)SY14; 15.5(1)SY15; 15.5(1)SY16; 15.7(3)M; 15.7(3)M1; 15.7(3)M0a; 15.7(3)M3; 15.7(3)M2; 15.7(3)M4; 15.7(3)M5; 15.7(3)M4a; 15.7(3)M4b; 15.7(3)M6; 15.7(3)M7; 15.7(3)M8; 15.7(3)M9; 15.8(3)M; 15.8(3)M1; 15.8(3)M0a; 15.8(3)M0b; 15.8(3)M2; 15.8(3)M1a; 15.8(3)M3; 15.8(3)M2a; 15.8(3)M4; 15.8(3)M3a; 15.8(3)M3b; 15.8(3)M5; 15.8(3)M6; 15.8(3)M7; 15.8(3)M8; 15.8(3)M9; 15.9(3)M; 15.9(3)M1; 15.9(3)M0a; 15.9(3)M2; 15.9(3)M3; 15.9(3)M2a; 15.9(3)M3a; 15.9(3)M4; 15.9(3)M3b; 15.9(3)M5; 15.9(3)M4a; 15.9(3)M6; 15.9(3)M7; 15.9(3)M6a; 15.9(3)M6b; 15.9(3)M8; 15.9(3)M7a; 15.9(3)M9; 15.9(3)M8b; 15.9(3)M10; 15.9(3)M11; 15.9(3)M12; 9.8.1; 9.8.1.5; 9.8.1.7; 9.8.2; 9.8.2.8; 9.8.2.14; 9.8.2.15; 9.8.2.17; 9.8.2.20; 9.8.2.24; 9.8.2.26; 9.8.2.28; 9.8.2.33; 9.8.2.35; 9.8.2.38; 9.8.3.8; 9.8.3.11; 9.8.3.14; 9.8.3.16; 9.8.3.18; 9.8.3.21; 9.8.3; 9.8.3.26; 9.8.3.29; 9.8.4; 9.8.4.3; 9.8.4.7; 9.8.4.8; 9.8.4.10; 9.8.4.12; 9.8.4.15; 9.8.4.17; 9.8.2.45; 9.8.4.25; 9.8.4.20; 9.8.4.22; 9.8.4.26; 9.8.4.29; 9.8.4.32; 9.8.4.33; 9.8.4.34; 9.8.4.35; 9.8.4.39; 9.8.4.40; 9.8.4.41; 9.8.4.43; 9.8.4.44; 9.8.4.45; 9.8.4.46; 9.8.4.48; 9.12.1; 9.12.1.2; 9.12.1.3; 9.12.2; 9.12.2.4; 9.12.2.5; 9.12.2.9; 9.12.3; 9.12.3.2; 9.12.3.7; 9.12.4; 9.12.3.12; 9.12.3.9; 9.12.2.1; 9.12.4.2; 9.12.4.4; 9.12.4.7; 9.12.4.10; 9.12.4.13; 9.12.4.8; 9.12.4.18; 9.12.4.24; 9.12.4.26; 9.12.4.29; 9.12.4.30; 9.12.4.35; 9.12.4.37; 9.12.4.38; 9.12.4.39; 9.12.4.40; 9.12.4.41; 9.12.4.47; 9.12.4.48; 9.12.4.50; 9.12.4.52; 9.12.4.54; 9.12.4.55; 9.12.4.56; 9.12.4.58; 9.12.4.62; 9.12.4.65; 9.12.4.67; 9.14.1; 9.14.1.10; 9.14.1.6; 9.14.1.15; 9.14.1.19; 9.14.1.30; 9.14.2; 9.14.2.4; 9.14.2.8; 9.14.2.13; 9.14.2.15; 9.14.3; 9.14.3.1; 9.14.3.9; 9.14.3.11; 9.14.3.13; 9.14.3.18; 9.14.3.15; 9.14.4; 9.14.4.6; 9.14.4.7; 9.14.4.12; 9.14.4.13; 9.14.4.14; 9.14.4.15; 9.14.4.17; 9.14.4.22; 9.14.4.23; 9.14.4.24; 9.16.1; 9.16.1.28; 9.16.2; 9.16.2.3; 9.16.2.7; 9.16.2.11; 9.16.2.13; 9.16.2.14; 9.16.3; 9.16.3.3; 9.16.3.14; 9.16.3.15; 9.16.3.19; 9.16.3.23; 9.16.4; 9.16.4.9; 9.16.4.14; 9.16.4.19; 9.16.4.27; 9.16.4.38; 9.16.4.39; 9.16.4.42; 9.16.4.48; 9.16.4.55; 9.16.4.57; 9.16.4.61; 9.16.4.62; 9.16.4.67; 9.16.4.70; 9.16.4.71; 9.16.4.76; 9.16.4.82; 9.16.4.84; 9.17.1; 9.17.1.7; 9.17.1.9; 9.17.1.10; 9.17.1.11; 9.17.1.13; 9.17.1.15; 9.17.1.20; 9.17.1.30; 9.17.1.33; 9.17.1.39; 9.17.1.45; 9.17.1.46; 9.18.1; 9.18.1.3; 9.18.2; 9.18.2.5; 9.18.2.7; 9.18.2.8; 9.18.3; 9.18.3.39; 9.18.3.46; 9.18.3.53; 9.18.3.55; 9.18.3.56; 9.18.4; 9.18.4.5; 9.18.4.8; 9.18.4.22; 9.18.4.24; 9.18.4.29; 9.18.4.34; 9.18.4.40; 9.18.4.47; 9.18.4.50; 9.18.4.52; 9.18.4.53; 9.18.4.57; 9.18.4.66; 9.18.4.67; 9.18.4.68; 9.19.1; 9.19.1.5; 9.19.1.9; 9.19.1.12; 9.19.1.18; 9.19.1.22; 9.19.1.24; 9.19.1.27; 9.19.1.28; 9.19.1.31; 9.19.1.37; 9.19.1.38; 9.19.1.42; 9.20.1; 9.20.1.5; 9.20.2; 9.20.2.10; 9.20.2.21; 9.20.2.22; 9.20.3; 9.20.3.4; 9.20.3.7; 9.20.3.9; 9.20.3.10; 9.20.3.13; 9.20.3.16; 9.20.3.20; 9.20.4; 9.20.4.7; 9.22.1.1; 9.22.1.3; 9.22.1.2; 9.22.1.6; 9.22.2; 9.22.2.4; 9.22.2.9; 9.23.1; 9.23.1.3; 9.23.1.7; 9.23.1.13; 3.5.0E; 3.5.1E; 3.5.2E; 3.5.3E; 3.11.1S; 3.11.2S; 3.11.0S; 3.11.3S; 3.11.4S; 3.12.0S; 3.12.1S; 3.12.2S; 3.12.3S; 3.12.0aS; 3.12.4S; 3.13.0S; 3.13.1S; 3.13.2S; 3.13.3S; 3.13.4S; 3.13.5S; 3.13.2aS; 3.13.0aS; 3.13.5aS; 3.13.6S; 3.13.7S; 3.13.6aS; 3.13.7aS; 3.13.8S; 3.13.9S; 3.13.10S; 3.6.0E; 3.6.1E; 3.6.2aE; 3.6.2E; 3.6.3E; 3.6.4E; 3.6.5E; 3.6.6E; 3.6.5aE; 3.6.7E; 3.6.8E; 3.6.7bE; 3.6.9E; 3.6.10E; 3.14.0S; 3.14.1S; 3.14.2S; 3.14.3S; 3.14.4S; 3.15.0S; 3.15.1S; 3.15.2S; 3.15.1cS; 3.15.3S; 3.15.4S; 3.7.0E; 3.7.1E; 3.7.2E; 3.7.3E; 3.7.4E; 3.7.5E; 3.16.0S; 3.16.1S; 3.16.1aS; 3.16.2S; 3.16.2aS; 3.16.0cS; 3.16.3S; 3.16.2bS; 3.16.3aS; 3.16.4S; 3.16.4aS; 3.16.4bS; 3.16.5S; 3.16.4dS; 3.16.6S; 3.16.7S; 3.16.6bS; 3.16.7aS; 3.16.7bS; 3.16.8S; 3.16.9S; 3.16.10S; 3.17.0S; 3.17.1S; 3.17.2S; 3.17.1aS; 3.17.3S; 3.17.4S; 3.8.0E; 3.8.1E; 3.8.2E; 3.8.3E; 3.8.4E; 3.8.5E; 3.8.5aE; 3.8.6E; 3.8.7E; 3.8.8E; 3.8.9E; 3.8.10E; 3.18.0aS; 3.18.0S; 3.18.1S; 3.18.2S; 3.18.3S; 3.18.4S; 3.18.0SP; 3.18.1SP; 3.18.1aSP; 3.18.1bSP; 3.18.1cSP; 3.18.2SP; 3.18.2aSP; 3.18.3SP; 3.18.4SP; 3.18.3aSP; 3.18.3bSP; 3.18.5SP; 3.18.6SP; 3.18.7SP; 3.18.8aSP; 3.18.9SP; 3.9.0E; 3.9.1E; 3.9.2E; 16.6.1; 16.6.2; 16.6.3; 16.6.4; 16.6.5; 16.6.4a; 16.6.5a; 16.6.6; 16.6.7; 16.6.8; 16.6.9; 16.6.10; 16.7.1; 16.7.1a; 16.7.1b; 16.7.2; 16.7.3; 16.7.4; 16.8.1; 16.8.1a; 16.8.1b; 16.8.1s; 16.8.1c; 16.8.1d; 16.8.2; 16.8.1e; 16.8.3; 16.9.1; 16.9.2; 16.9.1a; 16.9.1b; 16.9.1s; 16.9.3; 16.9.4; 16.9.3a; 16.9.5; 16.9.5f; 16.9.6; 16.9.7; 16.9.8; 16.10.1; 16.10.1a; 16.10.1b; 16.10.1s; 16.10.1c; 16.10.1e; 16.10.1d; 16.10.2; 16.10.1f; 16.10.1g; 16.10.3; 3.10.0E; 3.10.1E; 3.10.0cE; 3.10.2E; 3.10.3E; 16.11.1; 16.11.1a; 16.11.1b; 16.11.2; 16.11.1s; 16.12.1; 16.12.1s; 16.12.1a; 16.12.1c; 16.12.1w; 16.12.2; 16.12.1y; 16.12.2a; 16.12.3; 16.12.8; 16.12.2s; 16.12.1x; 16.12.1t; 16.12.4; 16.12.3s; 16.12.3a; 16.12.4a; 16.12.5; 16.12.6; 16.12.1z1; 16.12.5a; 16.12.5b; 16.12.1z2; 16.12.6a; 16.12.7; 16.12.9; 16.12.10; 16.12.10a; 16.12.11; 16.12.12; 16.12.13; 16.12.14; 3.11.0E; 3.11.1E; 3.11.2E; 3.11.3E; 3.11.1aE; 3.11.4E; 3.11.3aE; 3.11.5E; 3.11.6E; 3.11.7E; 3.11.8E; 3.11.9E; 3.11.10E; 3.11.11E; 3.11.12E; 3.11.13E; 17.1.1; 17.1.1a; 17.1.1s; 17.1.1t; 17.1.3; 17.2.1; 17.2.1r; 17.2.1a; 17.2.1v; 17.2.2; 17.2.3; 17.3.1; 17.3.2; 17.3.3; 17.3.1a; 17.3.1w; 17.3.2a; 17.3.1x; 17.3.1z; 17.3.4; 17.3.5; 17.3.4a; 17.3.6; 17.3.4b; 17.3.4c; 17.3.5a; 17.3.5b; 17.3.7; 17.3.8; 17.3.8a; 17.4.1; 17.4.2; 17.4.1a; 17.4.1b; 17.4.2a; 17.5.1; 17.5.1a; 17.6.1; 17.6.2; 17.6.1w; 17.6.1a; 17.6.1x; 17.6.3; 17.6.1y; 17.6.1z; 17.6.3a; 17.6.4; 17.6.1z1; 17.6.5; 17.6.6; 17.6.6a; 17.6.5a; 17.6.7; 17.6.8; 17.6.8a; 17.7.1; 17.7.1a; 17.7.1b; 17.7.2; 17.10.1; 17.10.1a; 17.10.1b; 17.8.1; 17.8.1a; 17.9.1; 17.9.1w; 17.9.2; 17.9.1a; 17.9.1x; 17.9.1y; 17.9.3; 17.9.2a; 17.9.1x1; 17.9.3a; 17.9.4; 17.9.1y1; 17.9.5; 17.9.4a; 17.9.5a; 17.9.5b; 17.9.6; 17.9.6a; 17.9.7; 17.9.5e; 17.9.5f; 17.9.8; 17.9.7a; 17.9.7b; 17.11.1; 17.11.1a; 17.12.1; 17.12.1w; 17.12.1a; 17.12.1x; 17.12.2; 17.12.3; 17.12.2a; 17.12.1y; 17.12.1z; 17.12.4; 17.12.3a; 17.12.1z1; 17.12.1z2; 17.12.4a; 17.12.5; 17.12.4b; 17.12.1z3; 17.12.5a; 17.12.1z4; 17.12.6; 17.12.5b; 17.12.5c; 17.12.6a; 17.12.5d; 17.12.6b; 17.13.1; 17.13.1a; 17.14.1; 17.14.1a; 17.15.1; 17.15.1w; 17.15.1a; 17.15.2; 17.15.1b; 17.15.1x; 17.15.1z; 17.15.3; 17.15.2c; 17.15.2a; 17.15.1y; 17.15.2b; 17.15.3a; 17.15.4; 17.15.3b; 17.15.4d; 17.15.4e; 17.16.1; 17.16.1a; 17.17.1; 17.18.1; 17.18.1w; 17.18.1a; 6.2.3; 6.2.3.1; 6.2.3.2; 6.2.3.3; 6.2.3.4; 6.2.3.5; 6.2.3.6; 6.2.3.7; 6.2.3.8; 6.2.3.10; 6.2.3.11; 6.2.3.9; 6.2.3.12; 6.2.3.13; 6.2.3.14; 6.2.3.15; 6.2.3.16; 6.2.3.17; 6.2.3.18; 6.6.0; 6.6.0.1; 6.6.1; 6.6.3; 6.6.4; 6.6.5; 6.6.5.1; 6.6.5.2; 6.6.7; 6.6.7.1; 6.6.7.2; 6.4.0; 6.4.0.1; 6.4.0.3; 6.4.0.2; 6.4.0.4; 6.4.0.5; 6.4.0.6; 6.4.0.7; 6.4.0.8; 6.4.0.9; 6.4.0.10; 6.4.0.11; 6.4.0.12; 6.4.0.13; 6.4.0.14; 6.4.0.15; 6.4.0.16; 6.4.0.17; 6.4.0.18; 7.0.0; 7.0.0.1; 7.0.1; 7.0.1.1; 7.0.2; 7.0.2.1; 7.0.3; 7.0.4; 7.0.5; 7.0.6; 7.0.6.1; 7.0.6.2; 7.0.6.3; 7.0.7; 7.0.8; 7.0.8.1; 7.1.0; 7.1.0.1; 7.1.0.2; 7.1.0.3; 7.2.0; 7.2.0.1; 7.2.1; 7.2.2; 7.2.3; 7.2.4; 7.2.4.1; 7.2.5; 7.2.5.1; 7.2.6; 7.2.7; 7.2.5.2; 7.2.8; 7.2.8.1; 7.2.9; 7.2.10; 7.2.10.2; 7.3.0; 7.3.1; 7.3.1.1; 7.3.1.2; 7.4.0; 7.4.1; 7.4.1.1; 7.4.2; 7.4.2.1; 7.4.2.2; 7.4.2.3; 7.4.2.4; 7.6.0; 7.6.1; 7.6.2; 7.6.2.1; 7.7.0; 7.7.10; 7.7.10.1 Fixed: See vendor advisory.

Why it matters

Review the vendor advisory and exposure of the affected product to determine operational impact.

Detection & mitigation

• Apply vendor-provided updates or mitigations.
• Review affected product exposure and access logs.