This security advisory represents a combination of multiple related product security vulnerabilities. The affected trains and releases are not identical for all of the defects, but there are significant groups of releases where affected versions intersect with others. All other releases of 12.0, such as 12.0DA, 12.0S or 12.0T, may be affected. Fixes for all six defects have been integrated into 12.2 prior to its initial availability, and therefore all releases based on 12.2 and all later versions are not vulnerable to the defects described in this advisory. The following table summarizes the IOS software releases that are known to be affected, and the earliest estimated dates of availability for the recommended fixed versions.
Dates are always tentative and subject to change.
Each row of the table describes a release train and the platforms or products for which it is intended. Rebuild Constructed from the previous maintenance or major release in the same train, it contains the fix for a specific defect. Although it receives less testing, it contains only the minimal changes necessary to effect the repair. Interim Built at regular intervals between maintenance releases and receive less testing. Interims should be selected only if there is no other suitable release that addresses the vulnerability, and interim images should be upgraded to the next available maintenance release as soon as possible.