1. Home
  2. CVE Database
  3. CVE-2011-5000
LOW · 3.5

CVE-2011-5000

The ssh_gssapi_parse_ename function in gss-serv.c in OpenSSH 5.8 and earlier, when gssapi-with-mic authentication is enabled, allows remote authenticated users to cause a denial of service (memory con...

Vulnerability Description

The ssh_gssapi_parse_ename function in gss-serv.c in OpenSSH 5.8 and earlier, when gssapi-with-mic authentication is enabled, allows remote authenticated users to cause a denial of service (memory consumption) via a large value in a certain length field. NOTE: there may be limited scenarios in which this issue is relevant.

CVSS Score

3.5

LOW

AV:N/AC:M/Au:S/C:N/I:N/A:P
Confidentiality
NONE
Integrity
NONE
Availability
PARTIAL

Affected Products

VendorProductVersions
OpenbsdOpenssh<= 5.8

Related Weaknesses (CWE)

CWE-189

References

FAQ

What is CVE-2011-5000?

CVE-2011-5000 is a vulnerability with a CVSS score of 3.5 (LOW). The ssh_gssapi_parse_ename function in gss-serv.c in OpenSSH 5.8 and earlier, when gssapi-with-mic authentication is enabled, allows remote authenticated users to cause a denial of service (memory con...

How severe is CVE-2011-5000?

CVE-2011-5000 has been rated LOW with a CVSS base score of 3.5/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2011-5000?

Check the references section above for vendor advisories and patch information. Affected products include: Openbsd Openssh.