PT-2011-2292 · Cisco+1 · Cisco Nexus 1000V Virtual Ethernet Module+2

Published 2011-02-17 · Updated 2018-10-10 · CVE-2011-0355

Positive Technologies (AI Summary)

CVSS v2.0

7.8

High

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Cisco Nexus 1000V Virtual Ethernet Module (VEM) versions 4.0(4) SV1(1) through SV1(3b)

Description The issue is related to the improper handling of dropped packets, which can be exploited by guest OS users to cause a denial of service. This can be achieved by sending an 802.1Q tagged packet over an access vEthernet port, resulting in the crash of the ESX or ESXi host OS.

Recommendations For Cisco Nexus 1000V Virtual Ethernet Module (VEM) versions 4.0(4) SV1(1) through SV1(3b), consider restricting access to the vEthernet port to minimize the risk of exploitation. As a temporary workaround, avoid using 802.1Q tagged packets over access vEthernet ports until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

DoS

Weakness Enumeration

CWE-399

Related Identifiers

CVE-2011-0355

Affected Products

Cisco Nexus 1000V Virtual Ethernet Module

Esx

Esxi

References · 14

• http://secunia.com/advisories/43084 · Vendor Advisory
• http://vmware.com/security/advisories/VMSA-2011-0002.html · Vendor Advisory
• http://vupen.com/english/advisories/2011/0314 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2011-0355 · Security Note
• http://vupen.com/english/advisories/2011/0315 · Vendor Advisory
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0355 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/65217 · Note
• http://cisco.com/en/US/docs/switches/datacenter/nexus1000/sw/4_0_4_s_v_1_3_c/release/notes/n1000v_rn.html · Note
• http://securityreason.com/securityalert/8090 · Note
• http://securityfocus.com/archive/1/516259/100/0/threaded · Note
• http://securitytracker.com/id?1025030 · Note
• http://osvdb.org/70837 · Note
• http://lists.vmware.com/pipermail/security-announce/2011/000118.html · Note
• http://securityfocus.com/bid/46247 · Note