CVE-2011-0355

Published: Feb 17, 2011Modified: Apr 29, 2026

7.8

Vector

AV:N/AC:L/Au:N/C:N/I:N/A:C

Exploitability: 10.0 / Impact: 6.9

Source: NVD

Description

Cisco Nexus 1000V Virtual Ethernet Module (VEM) 4.0(4) SV1(1) through SV1(3b), as used in VMware ESX 4.0 and 4.1 and ESXi 4.0 and 4.1, does not properly handle dropped packets, which allows guest OS users to cause a denial of service (ESX or ESXi host OS crash) by sending an 802.1Q tagged packet over an access vEthernet port, aka Cisco Bug ID CSCtj17451.

Affected (9)

Products: Cisco: 1000v Virtual Ethernet Module (vem) · Vmware: Esx, Esxi

1 product

1000v Virtual Ethernet Module (vem)

2 products

Configuration A

9 vulnerable

Vulnerable Software	Affected Versions
Cisco 1000v Virtual Ethernet Module (vem)	Version 4.0(4) sv1(1)
Cisco 1000v Virtual Ethernet Module (vem)	Version 4.0(4) sv1(2)
Cisco 1000v Virtual Ethernet Module (vem)	Version 4.0(4) sv1(3)
Cisco 1000v Virtual Ethernet Module (vem)	Version 4.0(4) sv1(3a)
Cisco 1000v Virtual Ethernet Module (vem)	Version 4.0(4) sv1(3b)
Vmware Esx	Version 4.0
Vmware Esx	Version 4.1
Vmware Esxi	Version 4.0
Vmware Esxi	Version 4.1

Related CWEs

References (24)

http://lists.vmware.com/pipermail/security-announce/2011/000118.html

Source: psirt@cisco.com

http://secunia.com/advisories/43084

Source: psirt@cisco.com

Vendor Advisory

http://securityreason.com/securityalert/8090

Source: psirt@cisco.com

http://securitytracker.com/id?1025030

Source: psirt@cisco.com

http://www.cisco.com/en/US/docs/switches/datacenter/nexus1000/sw/4_0_4_s_v_1_3_c/release/notes/n1000v_rn.html

Source: psirt@cisco.com

http://www.osvdb.org/70837

Source: psirt@cisco.com

http://www.securityfocus.com/archive/1/516259/100/0/threaded

Source: psirt@cisco.com

http://www.securityfocus.com/bid/46247

Source: psirt@cisco.com

http://www.vmware.com/security/advisories/VMSA-2011-0002.html

Source: psirt@cisco.com

Vendor Advisory

http://www.vupen.com/english/advisories/2011/0314

Source: psirt@cisco.com

Vendor Advisory

http://www.vupen.com/english/advisories/2011/0315

Source: psirt@cisco.com

Vendor Advisory

https://exchange.xforce.ibmcloud.com/vulnerabilities/65217

Source: psirt@cisco.com

http://lists.vmware.com/pipermail/security-announce/2011/000118.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/43084

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://securityreason.com/securityalert/8090

Source: af854a3a-2127-422b-91ae-364da2661108

http://securitytracker.com/id?1025030

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.cisco.com/en/US/docs/switches/datacenter/nexus1000/sw/4_0_4_s_v_1_3_c/release/notes/n1000v_rn.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.osvdb.org/70837

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/archive/1/516259/100/0/threaded

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/46247

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.vmware.com/security/advisories/VMSA-2011-0002.html

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://www.vupen.com/english/advisories/2011/0314

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://www.vupen.com/english/advisories/2011/0315

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

https://exchange.xforce.ibmcloud.com/vulnerabilities/65217

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.