Lucene search
HistoryApr 05, 2012 - 2:55 p.m.
CVE-2011-5000
cve-2011-5000
openssh
gssapi-with-mic authentication
memory consumption
denial of service
vulnerability
3.5 Low
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
SINGLE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:M/Au:S/C:N/I:N/A:P
4.7 Medium
AI Score
Confidence
High
0.004 Low
EPSS
Percentile
72.0%
The ssh_gssapi_parse_ename function in gss-serv.c in OpenSSH 5.8 and earlier, when gssapi-with-mic authentication is enabled, allows remote authenticated users to cause a denial of service (memory consumption) via a large value in a certain length field. NOTE: there may be limited scenarios in which this issue is relevant.
Affected configurations
Node
openbsdopensshRange≤5.8
ORopenbsdopensshMatch1.2
ORopenbsdopensshMatch1.2.1
ORopenbsdopensshMatch1.2.2
ORopenbsdopensshMatch1.2.3
ORopenbsdopensshMatch1.2.27
ORopenbsdopensshMatch1.3
ORopenbsdopensshMatch1.5
ORopenbsdopensshMatch1.5.7
ORopenbsdopensshMatch1.5.8
ORopenbsdopensshMatch3.0
ORopenbsdopensshMatch3.0.1
ORopenbsdopensshMatch3.0.1p1
ORopenbsdopensshMatch3.0.2
ORopenbsdopensshMatch3.0.2p1
ORopenbsdopensshMatch3.0p1
ORopenbsdopensshMatch3.1
ORopenbsdopensshMatch3.1p1
ORopenbsdopensshMatch3.2
ORopenbsdopensshMatch3.2.2
ORopenbsdopensshMatch3.2.2p1
ORopenbsdopensshMatch3.2.3p1
ORopenbsdopensshMatch3.3
ORopenbsdopensshMatch3.3p1
ORopenbsdopensshMatch3.4
ORopenbsdopensshMatch3.4p1
ORopenbsdopensshMatch3.5
ORopenbsdopensshMatch3.5p1
ORopenbsdopensshMatch3.6
ORopenbsdopensshMatch3.6.1
ORopenbsdopensshMatch3.6.1p1
ORopenbsdopensshMatch3.6.1p2
ORopenbsdopensshMatch3.7
ORopenbsdopensshMatch3.7.1
ORopenbsdopensshMatch3.7.1p1
ORopenbsdopensshMatch3.7.1p2
ORopenbsdopensshMatch3.8
ORopenbsdopensshMatch3.8.1
ORopenbsdopensshMatch3.8.1p1
ORopenbsdopensshMatch3.9
ORopenbsdopensshMatch3.9.1
ORopenbsdopensshMatch3.9.1p1
ORopenbsdopensshMatch4.0
ORopenbsdopensshMatch4.0p1
ORopenbsdopensshMatch4.1
ORopenbsdopensshMatch4.1p1
ORopenbsdopensshMatch4.2
ORopenbsdopensshMatch4.2p1
ORopenbsdopensshMatch4.3
ORopenbsdopensshMatch4.3p1
ORopenbsdopensshMatch4.3p2
ORopenbsdopensshMatch4.4
ORopenbsdopensshMatch4.4p1
ORopenbsdopensshMatch4.5
ORopenbsdopensshMatch4.6
ORopenbsdopensshMatch4.7
ORopenbsdopensshMatch4.8
ORopenbsdopensshMatch4.9
ORopenbsdopensshMatch5.0
ORopenbsdopensshMatch5.1
ORopenbsdopensshMatch5.2
ORopenbsdopensshMatch5.3
ORopenbsdopensshMatch5.4
ORopenbsdopensshMatch5.5
ORopenbsdopensshMatch5.6
ORopenbsdopensshMatch5.7
Related
ubuntucve
ubuntucve
CVE-2011-5000
2012-04-05 00:00:00
nessus
nessus
Oracle Linux 6 : openssh (ELSA-2012-0884)
2013-07-12 00:00:00
CentOS 6 : openssh (CESA-2012:0884)
2012-07-11 00:00:00
Scientific Linux Security Update : openssh on SL6.x i386/x86_64 (20120620)
2012-08-01 00:00:00
oraclelinux
oraclelinux
openssh security, bug fix, and enhancement update
2012-06-27 00:00:00
cvelist
cvelist
CVE-2011-5000
2012-04-04 10:00:00
openvas
openvas
Amazon Linux: Security Advisory (ALAS-2012-99)
2015-09-08 00:00:00
CentOS Update for openssh CESA-2012:0884 centos6
2012-07-30 00:00:00
CentOS Update for openssh CESA-2012:0884 centos6
2012-07-30 00:00:00
prion
prion
Authentication flaw
2012-04-05 14:55:00
f5
f5
SOL14740 - OpenSSH vulnerability CVE-2011-5000
2013-10-10 00:00:00
K14740 : OpenSSH vulnerability CVE-2011-5000
2013-10-10 00:00:00
redhat
redhat
(RHSA-2012:0884) Low: openssh security, bug fix, and enhancement update
2012-06-20 00:00:00
veracode
veracode
Denial Of Service (DoS)
2019-01-15 08:52:41
amazon
amazon
Medium: openssh
2012-07-05 16:18:00
debiancve
debiancve
CVE-2011-5000
2012-04-05 14:55:03
nvd
nvd
CVE-2011-5000
2012-04-05 14:55:03
centos
centos
openssh, pam_ssh_agent_auth security update
2012-07-10 17:25:37
gentoo
gentoo
OpenSSH: Multiple vulnerabilities
2014-05-11 00:00:00
rosalinux
rosalinux
Advisory ROSA-SA-2021-1938
2021-07-02 17:38:20
3.5 Low
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
SINGLE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:M/Au:S/C:N/I:N/A:P
4.7 Medium
AI Score
Confidence
High
0.004 Low
EPSS
Percentile
72.0%
Related for CVE-2011-5000