Lucene search
HistoryApr 05, 2012 - 2:55 p.m.
CVE-2011-5000
CVSS2
3.5
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
SINGLE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:M/Au:S/C:N/I:N/A:P
AI Score
5.8
Confidence
High
EPSS
0.004
Percentile
72.0%
The ssh_gssapi_parse_ename function in gss-serv.c in OpenSSH 5.8 and earlier, when gssapi-with-mic authentication is enabled, allows remote authenticated users to cause a denial of service (memory consumption) via a large value in a certain length field. NOTE: there may be limited scenarios in which this issue is relevant.
Affected configurations
Node
openbsdopensshRange≤5.8
ORopenbsdopensshMatch1.2
ORopenbsdopensshMatch1.2.1
ORopenbsdopensshMatch1.2.2
ORopenbsdopensshMatch1.2.3
ORopenbsdopensshMatch1.2.27
ORopenbsdopensshMatch1.3
ORopenbsdopensshMatch1.5
ORopenbsdopensshMatch1.5.7
ORopenbsdopensshMatch1.5.8
ORopenbsdopensshMatch3.0
ORopenbsdopensshMatch3.0.1
ORopenbsdopensshMatch3.0.1p1
ORopenbsdopensshMatch3.0.2
ORopenbsdopensshMatch3.0.2p1
ORopenbsdopensshMatch3.0p1
ORopenbsdopensshMatch3.1
ORopenbsdopensshMatch3.1p1
ORopenbsdopensshMatch3.2
ORopenbsdopensshMatch3.2.2
ORopenbsdopensshMatch3.2.2p1
ORopenbsdopensshMatch3.2.3p1
ORopenbsdopensshMatch3.3
ORopenbsdopensshMatch3.3p1
ORopenbsdopensshMatch3.4
ORopenbsdopensshMatch3.4p1
ORopenbsdopensshMatch3.5
ORopenbsdopensshMatch3.5p1
ORopenbsdopensshMatch3.6
ORopenbsdopensshMatch3.6.1
ORopenbsdopensshMatch3.6.1p1
ORopenbsdopensshMatch3.6.1p2
ORopenbsdopensshMatch3.7
ORopenbsdopensshMatch3.7.1
ORopenbsdopensshMatch3.7.1p1
ORopenbsdopensshMatch3.7.1p2
ORopenbsdopensshMatch3.8
ORopenbsdopensshMatch3.8.1
ORopenbsdopensshMatch3.8.1p1
ORopenbsdopensshMatch3.9
ORopenbsdopensshMatch3.9.1
ORopenbsdopensshMatch3.9.1p1
ORopenbsdopensshMatch4.0
ORopenbsdopensshMatch4.0p1
ORopenbsdopensshMatch4.1
ORopenbsdopensshMatch4.1p1
ORopenbsdopensshMatch4.2
ORopenbsdopensshMatch4.2p1
ORopenbsdopensshMatch4.3
ORopenbsdopensshMatch4.3p1
ORopenbsdopensshMatch4.3p2
ORopenbsdopensshMatch4.4
ORopenbsdopensshMatch4.4p1
ORopenbsdopensshMatch4.5
ORopenbsdopensshMatch4.6
ORopenbsdopensshMatch4.7
ORopenbsdopensshMatch4.8
ORopenbsdopensshMatch4.9
ORopenbsdopensshMatch5.0
ORopenbsdopensshMatch5.1
ORopenbsdopensshMatch5.2
ORopenbsdopensshMatch5.3
ORopenbsdopensshMatch5.4
ORopenbsdopensshMatch5.5
ORopenbsdopensshMatch5.6
ORopenbsdopensshMatch5.7
| Vendor | Product | Version | CPE |
|---|---|---|---|
| openbsd | openssh | * | cpe:2.3:a:openbsd:openssh:*:*:*:*:*:*:*:* |
| openbsd | openssh | 1.2 | cpe:2.3:a:openbsd:openssh:1.2:*:*:*:*:*:*:* |
| openbsd | openssh | 1.2.1 | cpe:2.3:a:openbsd:openssh:1.2.1:*:*:*:*:*:*:* |
| openbsd | openssh | 1.2.2 | cpe:2.3:a:openbsd:openssh:1.2.2:*:*:*:*:*:*:* |
| openbsd | openssh | 1.2.3 | cpe:2.3:a:openbsd:openssh:1.2.3:*:*:*:*:*:*:* |
| openbsd | openssh | 1.2.27 | cpe:2.3:a:openbsd:openssh:1.2.27:*:*:*:*:*:*:* |
| openbsd | openssh | 1.3 | cpe:2.3:a:openbsd:openssh:1.3:*:*:*:*:*:*:* |
| openbsd | openssh | 1.5 | cpe:2.3:a:openbsd:openssh:1.5:*:*:*:*:*:*:* |
| openbsd | openssh | 1.5.7 | cpe:2.3:a:openbsd:openssh:1.5.7:*:*:*:*:*:*:* |
| openbsd | openssh | 1.5.8 | cpe:2.3:a:openbsd:openssh:1.5.8:*:*:*:*:*:*:* |
Related
openvas
openvas
CentOS Update for openssh CESA-2012:0884 centos6
2012-07-30 00:00:00
CentOS Update for openssh CESA-2012:0884 centos6
2012-07-30 00:00:00
RedHat Update for openssh RHSA-2012:0884-04
2012-06-22 00:00:00
debiancve
debiancve
CVE-2011-5000
2012-04-05 14:55:03
veracode
veracode
Denial Of Service (DoS)
2019-01-15 08:52:41
amazon
amazon
Medium: openssh
2012-07-05 16:18:00
redhat
redhat
(RHSA-2012:0884) Low: openssh security, bug fix, and enhancement update
2012-06-20 00:00:00
prion
prion
Authentication flaw
2012-04-05 14:55:00
nessus
nessus
Amazon Linux AMI : openssh (ALAS-2012-99)
2013-09-04 00:00:00
Oracle Linux 6 : openssh (ELSA-2012-0884)
2013-07-12 00:00:00
CentOS 6 : openssh (CESA-2012:0884)
2012-07-11 00:00:00
centos
centos
openssh, pam_ssh_agent_auth security update
2012-07-10 17:25:37
ubuntucve
ubuntucve
CVE-2011-5000
2012-04-05 00:00:00
oraclelinux
oraclelinux
openssh security, bug fix, and enhancement update
2012-06-27 00:00:00
cvelist
cvelist
CVE-2011-5000
2012-04-04 10:00:00
cve
cve
CVE-2011-5000
2012-04-05 14:55:03
f5
f5
SOL14740 - OpenSSH vulnerability CVE-2011-5000
2013-10-10 00:00:00
K14740 : OpenSSH vulnerability CVE-2011-5000
2013-10-10 00:00:00
gentoo
gentoo
OpenSSH: Multiple vulnerabilities
2014-05-11 00:00:00
rosalinux
rosalinux
Advisory ROSA-SA-2021-1938
2021-07-02 17:38:20
CVSS2
3.5
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
SINGLE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:M/Au:S/C:N/I:N/A:P
AI Score
5.8
Confidence
High
EPSS
0.004
Percentile
72.0%
Related for NVD:CVE-2011-5000