will there be an output "combined fix" like the web GUI does, i can't find it in the received XML ?

[klohse]

Hello,

i just tried the IOS checker calls in the CERT API.

When using the normal web page i get sometimes an output that says "combined fix" which is pretty useful.

I don't receive it in the XML it seems, will it be included someday or is there a hint to get this ?

[Omar Santos]

Hi Klohse,

The results currently does not provide the combined results. I have entered an enhancement request for this. However, this probably can help you. You can use the first_fixed filter, as shown below (using the openVulnQuery python-based client):

bash-3.2$ openVulnQuery --ios 15.5\(2\)T -f first_fixed

For example, you can display each advisory and all the first fixed versions and then see which one is the most recent version that includes all fixes. It's not perfect, but it will get you the data in the meantime.

bash-3.2$ openVulnQuery --ios 15.5\(2\)T -f advisory_id first_fixed
[
    {
        "advisory_id": "cisco-sa-20170629-snmp",
        "first_fixed": [
            "15.6(1)T3"
        ]
    },
    {
        "advisory_id": "cisco-sa-20170419-energywise",
        "first_fixed": [
            "15.6(1)T3"
        ]
    },
    {
        "advisory_id": "cisco-sa-20170322-dhcpc",
        "first_fixed": [
            "15.6(1)T3",
            "15.6(2)T2"
        ]
    },
    {
        "advisory_id": "cisco-sa-20170322-l2tp",
        "first_fixed": [
            "15.6(1)T3",
            "15.6(2)T1"
        ]
    },
    {
        "advisory_id": "cisco-sa-20160928-aaados",
        "first_fixed": [
            "15.5(2)T4"
        ]
    },
    {
        "advisory_id": "cisco-sa-20160928-dns",
        "first_fixed": [
            "15.5(2)T4"
        ]
    },
    {
        "advisory_id": "cisco-sa-20160928-h323",
        "first_fixed": [
            "15.5(2)T4"
        ]
    },
    {
        "advisory_id": "cisco-sa-20160928-ios-ikev1",
        "first_fixed": [
            "15.5(2)T4"
        ]
    },
    {
        "advisory_id": "cisco-sa-20160928-msdp",
        "first_fixed": [
            "15.5(2)T4"
        ]
    },
    {
        "advisory_id": "cisco-sa-20160916-ikev1",
        "first_fixed": [
            "15.6(1)T3",
            "15.6(2)T2"
        ]
    },
    {
        "advisory_id": "cisco-sa-20160525-ipv6",
        "first_fixed": [
            "15.5(2)T4"
        ]
    },
    {
        "advisory_id": "cisco-sa-20160323-ios-ikev2",
        "first_fixed": [
            "15.5(2)T3"
        ]
    },
    {
        "advisory_id": "cisco-sa-20151021-ntp",
        "first_fixed": [
            "15.5(2)T4"
        ]
    },
    {
        "advisory_id": "cisco-sa-20150408-ntpd",
        "first_fixed": [
            "15.5(2)T2"
        ]
    },
    {
        "advisory_id": "cisco-sa-20150320-openssl",
        "first_fixed": [
            "15.5(2)T1"
        ]
    },
    {
        "advisory_id": "cisco-sa-20150310-ssl",
        "first_fixed": [
            "15.5(2)T1"
        ]
    },
    {
        "advisory_id": "Cisco-SA-20150113-CVE-2015-0204",
        "first_fixed": [
            "15.5(2)T1"
        ]
    }
]