CVE-2011-5000: openbsd openssh Numeric Errors
Vulnerability summary
CVE-2011-5000 is a low (CVSS 3.5) Numeric Errors vulnerability in openbsd openssh. EPSS estimates a 2.56% chance of exploitation in the next 30 days, higher than 84.9% of scored vulnerabilities. 2 public exploits are recorded.
Timeline
- 04-04-2012PublishedVulnerability first disclosed.
- 07-08-2024Last modifiedVulnerability information updated.
Description
The ssh_gssapi_parse_ename function in gss-serv.c in OpenSSH 5.8 and earlier, when gssapi-with-mic authentication is enabled, allows remote authenticated users to cause a denial of service (memory consumption) via a large value in a certain length field. NOTE: there may be limited scenarios in which this issue is relevant.
CVSS metrics
1 score · 1 source · 1 versionEPSS trend
Probability
2.56%
Chance of exploitation in the next 30 days
Percentile
85%
Versus all other CVEs
30-day change
0.00 pp
From 2.56% on 21-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
2 foundExploit Reference (seclists.org)
Maturity: unknown
Exploit Reference (site.pi3.com.pl)
Maturity: unknown
Weaknesses
CWE · root causeAffected systems
Redhat7 products
- openssh< 0:5.3p1-81.el6
- openssh-askpass< 0:5.3p1-81.el6
- openssh-clients< 0:5.3p1-81.el6
- openssh-debuginfo< 0:5.3p1-81.el6
- openssh-ldap< 0:5.3p1-81.el6
Debian1 product
- openssh< 1:5.9p1-1
Openbsd1 product
- openssh≤ 5.8 | 1.2 | 1.2.1 | 1.2.2 | 1.2.3 | 1.2.27 | 1.3 | 1.5 | 1.5.7 | 1.5.8 | 3.0 | 3.0.1 | 3.0.1p1 | 3.0.2 | 3.0.2p1 | 3.0p1 | 3.1 | 3.1p1 | 3.2 | 3.2.2 | 3.2.2p1 | 3.2.3p1 | 3.3 | 3.3p1 | 3.4 | 3.4p1 | 3.5 | 3.5p1 | 3.6 | 3.6.1 | 3.6.1p1 | 3.6.1p2 | 3.7 | 3.7.1 | 3.7.1p1 | 3.7.1p2 | 3.8 | 3.8.1 | 3.8.1p1 | 3.9 | 3.9.1 | 3.9.1p1 | 4.0 | 4.0p1 | 4.1 | 4.1p1 | 4.2 | 4.2p1 | 4.3 | 4.3p1 | 4.3p2 | 4.4 | 4.4p1 | 4.5 | 4.6 | 4.7 | 4.8 | 4.9 | 5.0 | 5.1 | 5.2 | 5.3 | 5.4 | 5.5 | 5.6 | 5.7
3 vendors · 9 products
