SNORT IDS bypass vulnerability

[DarrenOC]

SNORT/IDS bypass vulnerability 

https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-snort-dos-9D3hJLuj

[DarrenOC]

If I read this correctly are we saying there’s no fix available if running MX v16.x till February?  And where it states Migrate to a fixed release....what is the fixed release?  

Are we expected to sit and cross our fingers till then?

[cmr]

Also what is the MX250M...?

[mlefebvre]

Is this implying that no fix is planned for 14 or 15, when 16 is not yet in GA? I sure hope that isn't the case

Also does this mean that 17 is NOT affected?

[DarrenOC]

Hi @mlefebvre , I think that’s the case. The only fix will be when the hot fix for 16.x is released in February.

I did raise a support ticket earlier today but haven’t had a response as yet. Also tried to call support but the call was dropped after being in a queue for 20+ minutes.

like yourself I was looking for clarification.

[DarrenOC]

@Ryan_Miles , @MerakiDave , @GreenMan 

Sorry to tag you all but are Meraki able to provide any further information or clarification here?