CVEvulnerability
CVE-2011-0355
7.8 HIGH
Official page ↗
- Status
- Modified
- Published
- 2011-02-17
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.8 HIGH — AV:N/AC:L/Au:N/C:N/I:N/A:C
- Weaknesses
- CWE-399
Description
Cisco Nexus 1000V Virtual Ethernet Module (VEM) 4.0(4) SV1(1) through SV1(3b), as used in VMware ESX 4.0 and 4.1 and ESXi 4.0 and 4.1, does not properly handle dropped packets, which allows guest OS users to cause a denial of service (ESX or ESXi host OS crash) by sending an 802.1Q tagged packet over an access vEthernet port, aka Cisco Bug ID CSCtj17451.
Affected configurations
• cisco 1000v virtual ethernet module \(vem\) 4.0\(4\)
• vmware esx 4.0
• vmware esx 4.1
• vmware esxi 4.0
• vmware esxi 4.1
Related
Weakness · not in database (1)
References
- http://lists.vmware.com/pipermail/security-announce/2011/000118.html lists.vmware.com
- http://secunia.com/advisories/43084 Vendor Advisory
- http://securityreason.com/securityalert/8090 securityreason.com
- http://securitytracker.com/id?1025030 securitytracker.com
- http://www.cisco.com/en/US/docs/switches/datacenter/nexus1000/sw/4_0_4_s_v_1_3_c/release/notes/n1000v_rn.html www.cisco.com
- http://www.osvdb.org/70837 www.osvdb.org
- http://www.securityfocus.com/archive/1/516259/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/46247 www.securityfocus.com
- http://www.vmware.com/security/advisories/VMSA-2011-0002.html Vendor Advisory
- http://www.vupen.com/english/advisories/2011/0314 Vendor Advisory
- http://www.vupen.com/english/advisories/2011/0315 Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/65217 exchange.xforce.ibmcloud.com
- http://lists.vmware.com/pipermail/security-announce/2011/000118.html lists.vmware.com
- http://secunia.com/advisories/43084 Vendor Advisory
- http://securityreason.com/securityalert/8090 securityreason.com
- http://securitytracker.com/id?1025030 securitytracker.com
- http://www.cisco.com/en/US/docs/switches/datacenter/nexus1000/sw/4_0_4_s_v_1_3_c/release/notes/n1000v_rn.html www.cisco.com
- http://www.osvdb.org/70837 www.osvdb.org
- http://www.securityfocus.com/archive/1/516259/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/46247 www.securityfocus.com
- http://www.vmware.com/security/advisories/VMSA-2011-0002.html Vendor Advisory
- http://www.vupen.com/english/advisories/2011/0314 Vendor Advisory
- http://www.vupen.com/english/advisories/2011/0315 Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/65217 exchange.xforce.ibmcloud.com