Every CVE Search/ Get API key

CVE-2011-5000

The ssh_gssapi_parse_ename function in gss-serv.c in OpenSSH 5.8 and earlier, when gssapi-with...

3.5 LowFix available

The ssh_gssapi_parse_ename function in gss-serv.c in OpenSSH 5.8 and earlier, when gssapi-with-mic authentication is enabled, allows remote authenticated users to cause a denial of service (memory consumption) via a large value in a certain length field. NOTE: there may be limited scenarios in which this issue is relevant.

Exploit likelihood

2.56%Up 1.5 points since Feb 4, 2022
90%50%10%1%

What each source reports

NVD Score used 3.5

The ssh_gssapi_parse_ename function in gss-serv.c in OpenSSH 5.8 and earlier, when gssapi-with-mic authentication is enabled, allows remote authenticated users to cause a denial of service (memory consumption) via a large value in a certain length field. NOTE: there may be limited scenarios in which this issue is relevant.

Record
CVE-2011-5000
CVSS 2.0
3.5 LowAV:N/AC:M/Au:S/C:N/I:N/A:P
Weakness
CWE-189
Updated
2026-11-02
CVE List No score

The ssh_gssapi_parse_ename function in gss-serv.c in OpenSSH 5.8 and earlier, when gssapi-with-mic authentication is enabled, allows remote authenticated users to cause a denial of service (memory consumption) via a large value in a certain length field. NOTE: there may be limited scenarios in which this issue is relevant.

Record
CVE-2011-5000
Updated
2026-11-02
EUVDEUVD-2011-4905 No score

The ssh_gssapi_parse_ename function in gss-serv.c in OpenSSH 5.8 and earlier, when gssapi-with-mic authentication is enabled, allows remote authenticated users to cause a denial of service (memory consumption) via a large value in a certain length field. NOTE: there may be limited scenarios in which this issue is relevant.

Record
EUVD-2011-4905
Updated
2026-11-03
GitHub AdvisoriesGHSA-wq52-9gh8-cwrp No score

The ssh_gssapi_parse_ename function in gss-serv.c in OpenSSH 5.8 and earlier, when gssapi-with...

The ssh_gssapi_parse_ename function in gss-serv.c in OpenSSH 5.8 and earlier, when gssapi-with-mic authentication is enabled, allows remote authenticated users to cause a denial of service (memory consumption) via a large value in a certain length field. NOTE: there may be limited scenarios in which this issue is relevant.

Record
GHSA-wq52-9gh8-cwrp
Updated
2026-11-02
OSV No score

The ssh_gssapi_parse_ename function in gss-serv.c in OpenSSH 5.8 and earlier, when gssapi-with-mic authentication is enabled, allows remote authenticated users to cause a denial of service (memory consumption) via a large value in a certain length field. NOTE: there may be limited scenarios in which this issue is relevant.

Record
CVE-2011-5000
Updated
2026-11-02
OSVDEBIAN-CVE-2011-5000 No score

The ssh_gssapi_parse_ename function in gss-serv.c in OpenSSH 5.8 and earlier, when gssapi-with-mic authentication is enabled, allows remote authenticated users to cause a denial of service (memory consumption) via a large value in a certain length field. NOTE: there may be limited scenarios in which this issue is relevant.

Record
DEBIAN-CVE-2011-5000
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
openssh
Debian:12
 before 1:5.9p1-1
1:5.9p1-1
openssh
Debian:13
 before 1:5.9p1-1
1:5.9p1-1
openssh
Debian:14
 before 1:5.9p1-1
1:5.9p1-1
openssh
Red Hat:enterprise_linux:6::client
 before 0:5.3p1-81.el6
0:5.3p1-81.el6
openssh-debuginfo
Red Hat:enterprise_linux:6::client
 before 0:5.3p1-81.el6
0:5.3p1-81.el6
openssh-ldap
Red Hat:enterprise_linux:6::client
 before 0:5.3p1-81.el6
0:5.3p1-81.el6
pam_ssh_agent_auth
Red Hat:enterprise_linux:6::client
 before 0:0.9-81.el6
0:0.9-81.el6
openssh-askpass
Red Hat:enterprise_linux:6::client
 before 0:5.3p1-81.el6
0:5.3p1-81.el6
openssh-clients
Red Hat:enterprise_linux:6::client
 before 0:5.3p1-81.el6
0:5.3p1-81.el6
openssh-server
Red Hat:enterprise_linux:6::client
 before 0:5.3p1-81.el6
0:5.3p1-81.el6
Show 21 moreShow less
Affected packages
PackageAffectedFixed
openssh
Red Hat:enterprise_linux:6::computenode
 before 0:5.3p1-81.el6
0:5.3p1-81.el6
openssh-askpass
Red Hat:enterprise_linux:6::computenode
 before 0:5.3p1-81.el6
0:5.3p1-81.el6
openssh-debuginfo
Red Hat:enterprise_linux:6::computenode
 before 0:5.3p1-81.el6
0:5.3p1-81.el6
openssh-ldap
Red Hat:enterprise_linux:6::computenode
 before 0:5.3p1-81.el6
0:5.3p1-81.el6
pam_ssh_agent_auth
Red Hat:enterprise_linux:6::computenode
 before 0:0.9-81.el6
0:0.9-81.el6
openssh-clients
Red Hat:enterprise_linux:6::computenode
 before 0:5.3p1-81.el6
0:5.3p1-81.el6
openssh-server
Red Hat:enterprise_linux:6::computenode
 before 0:5.3p1-81.el6
0:5.3p1-81.el6
openssh
Red Hat:enterprise_linux:6::server
 before 0:5.3p1-81.el6
0:5.3p1-81.el6
openssh-debuginfo
Red Hat:enterprise_linux:6::server
 before 0:5.3p1-81.el6
0:5.3p1-81.el6
openssh-ldap
Red Hat:enterprise_linux:6::server
 before 0:5.3p1-81.el6
0:5.3p1-81.el6
pam_ssh_agent_auth
Red Hat:enterprise_linux:6::server
 before 0:0.9-81.el6
0:0.9-81.el6
openssh-askpass
Red Hat:enterprise_linux:6::server
 before 0:5.3p1-81.el6
0:5.3p1-81.el6
openssh-clients
Red Hat:enterprise_linux:6::server
 before 0:5.3p1-81.el6
0:5.3p1-81.el6
openssh-server
Red Hat:enterprise_linux:6::server
 before 0:5.3p1-81.el6
0:5.3p1-81.el6
openssh
Red Hat:enterprise_linux:6::workstation
 before 0:5.3p1-81.el6
0:5.3p1-81.el6
openssh-debuginfo
Red Hat:enterprise_linux:6::workstation
 before 0:5.3p1-81.el6
0:5.3p1-81.el6
openssh-ldap
Red Hat:enterprise_linux:6::workstation
 before 0:5.3p1-81.el6
0:5.3p1-81.el6
pam_ssh_agent_auth
Red Hat:enterprise_linux:6::workstation
 before 0:0.9-81.el6
0:0.9-81.el6
openssh-askpass
Red Hat:enterprise_linux:6::workstation
 before 0:5.3p1-81.el6
0:5.3p1-81.el6
openssh-clients
Red Hat:enterprise_linux:6::workstation
 before 0:5.3p1-81.el6
0:5.3p1-81.el6
openssh-server
Red Hat:enterprise_linux:6::workstation
 before 0:5.3p1-81.el6
0:5.3p1-81.el6

History

History
RecordedChangedSources
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2011-5000 is a low vulnerability (CVSS 3.5) in Openbsd Openssh, published April 4, 2012. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 2.56%, the 85th percentile. Fixed in openssh 1:5.9p1-1.

References

Show 9 moreShow less
Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open