VULNERABILITY INTELLIGENCE

CVE-2011-5000

CVSS score3.5 LOW
EPSS probability2.56%
CISA KEVNot currently listed
Published2012-04-05
Last modified2026-06-16
CVSS vectorAV:N/AC:M/Au:S/C:N/I:N/A:P

Description

The ssh_gssapi_parse_ename function in gss-serv.c in OpenSSH 5.8 and earlier, when gssapi-with-mic authentication is enabled, allows remote authenticated users to cause a denial of service (memory consumption) via a large value in a certain length field. NOTE: there may be limited scenarios in which this issue is relevant.

Primary references