CVE-2011-0355 json
Cisco Nexus 1000V Virtual Ethernet Module (VEM) 4.0(4) SV1(1) through SV1(3b), as used in VMware ESX 4.0 and 4.1 and ESXi 4.0 and 4.1, does…
published 2011-02-17 15 y ago modified 2026-06-16 4 mo ago also EUVD-2011-0381
- cvss
- 7.8
- version 2.0, NVD
- cisa kev
- Not listed
- not in CISA's catalog
- epss
- 2.0%
- EPSS 2.0% chance of exploitation in 30 days, percentile 80%
- public exploits
- 0
- none known
Summary
Cisco Nexus 1000V Virtual Ethernet Module (VEM) 4.0(4) SV1(1) through SV1(3b), as used in VMware ESX 4.0 and 4.1 and ESXi 4.0 and 4.1, does not properly handle dropped packets, which allows guest OS users to cause a denial of service (ESX or ESXi host OS crash) by sending an 802.1Q tagged packet over an access vEthernet port, aka Cisco Bug ID CSCtj17451.
Exploit prediction
1.98% chance of exploitation in the next 30 days, higher than 80% of all scored CVEs (FIRST EPSS, 2026-11-09).
CVSS scores
| assigned by | version | score | vector |
|---|---|---|---|
| NVD | 2.0 | 7.8 | AV:N/AC:L/Au:N/C:N/I:N/A:C |
Classification
- Weakness
-
- CWE-399 Resource Management Errors
- Technology feeds
References
-
secunia.com
/advisories/43084
third-party-advisory, vendor-advisory
-
vupen.com
/english/advisories/2011/0314
vdb-entry, vendor-advisory
-
vmware.com
/security/advisories/VMSA-2011-0002.html
vendor-advisory
-
vupen.com
/english/advisories/2011/0315
vdb-entry, vendor-advisory
-
securityfocus.com
/archive/1/516259/100/0/threaded
mailing-list
-
exchange.xforce.ibmcloud.com
/vulnerabilities/65217
vdb-entry
-
securitytracker.com
/id?1025030
vdb-entry
-
securityfocus.com
/bid/46247
vdb-entry
-
lists.vmware.com
/pipermail/security-announce/2011/000118.html
mailing-list
-
securityreason.com
/securityalert/8090
third-party-advisory
-
osvdb.org
/70837
vdb-entry
- cisco.com /en/US/docs/switches/datacenter/nexus1000/sw/4_0_4_s_v_1_3_c/release/notes/n1000v_rn.html
Sources
- CVE List CVE-2011-0355
- NVD CVE-2011-0355
Fencer Intel keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.