CVE-2011-0355: High severity cisco 1000v virtual ethernet module (vem) vulnerability
Cisco Nexus 1000V Virtual Ethernet Module (VEM) 4.0(4) SV1(1) through SV1(3b), as used in VMware ESX 4.0 and 4.1 and ESXi 4.0 and 4.1, does not properly handle dropped packets, which allows guest OS users to cause a denial of service (ESX or ESXi host OS crash) by sending an 802.1Q tagged packet over an access vEthernet port, aka Cisco Bug ID CSCtj17451.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2011-0355?
CVE-2011-0355 has a medium severity level due to its potential to cause denial of service.
How do I fix CVE-2011-0355?
To mitigate CVE-2011-0355, it is recommended to upgrade to the latest version of the Cisco Nexus 1000V Virtual Ethernet Module or apply any available patches.
Which versions are affected by CVE-2011-0355?
CVE-2011-0355 affects Cisco Nexus 1000V VEM versions 4.0(4) SV1(1) through SV1(3b) and VMware ESX and ESXi versions 4.0 and 4.1.
Can CVE-2011-0355 lead to complete system compromise?
CVE-2011-0355 does not lead to complete system compromise but can cause a denial of service that crashes the host OS.
Is there a workaround for CVE-2011-0355 if patching is not possible?
If patching is not possible for CVE-2011-0355, a temporary workaround is to minimize the use of tagged packets until a fix can be applied.