What’s Vulnerable › Vulnerabilities

CVE-2011-5000

• Severity: low (CVSS 3.5 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 2.6% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2012-04-05 · updated 2026-06-16
• Weakness: CWE-189

Description

The ssh_gssapi_parse_ename function in gss-serv.c in OpenSSH 5.8 and earlier, when gssapi-with-mic authentication is enabled, allows remote authenticated users to cause a denial of service (memory consumption) via a large value in a certain length field. NOTE: there may be limited scenarios in which this issue is relevant.

Affected products

• OpenSSH: through 5.8; 1.2, 1.2.1, 1.2.2, 1.2.3, 1.2.27, 1.3 (+59)

References

• http://rhn.redhat.com/errata/RHSA-2012-0884.html
• http://seclists.org/fulldisclosure/2011/Aug/2
• http://site.pi3.com.pl/adv/ssh_1.txt
• http://rhn.redhat.com/errata/RHSA-2012-0884.html
• http://seclists.org/fulldisclosure/2011/Aug/2
• http://site.pi3.com.pl/adv/ssh_1.txt

Get alerted when CVE-2011-5000 or the next vulnerability affects your stack