Vulnerability
CVE-2011-5000
CVE-2011-5000 is a low-severity vulnerability (CVSS v2 3.5). As of 2026-10-11, 18 443 hosts in our data show software it affects on an open service in at least 15 countries.
The ssh_gssapi_parse_ename function in gss-serv.c in OpenSSH 5.8 and earlier, when gssapi-with-mic authentication is enabled, allows remote authenticated users to cause a denial of service (memory consumption) via a large value in a certain length field. NOTE: there may be limited scenarios in which this issue is relevant.
- Published
- 2012-04-05
- Last modified
- 2026-06-16
- CVSS score
- 3.5 CVSS v2
- CVSS vector (v2)
- AV:N/AC:M/Au:S/C:N/I:N/A:P
- Exploit likelihood (EPSS)
- 2.6% in the next 30 days (top 16% of CVEs)
Exposure in our data
18 443 hosts
Hosts whose banner shows an affected software version on a service open at their latest check.
Not counted: 734 hosts with this CVE only from an older observation.
Not counted: 35 356 more on distribution builds that may be patched (the distribution may have backported the fix without changing the version).
928 more hosts had it earlier (the software version has since changed or the service is gone).
Counted 2026-10-11 04:20 UTC
By country
| United States US | 4 789 |
| China CN | 1 926 |
| Germany DE | 1 468 |
| France FR | 1 261 |
| Italy IT | 1 118 |
| United Kingdom GB | 839 |
| Russia RU | 693 |
| Japan JP | 655 |
| Spain ES | 598 |
| South Korea KR | 476 |
| Netherlands NL | 368 |
| Sweden SE | 350 |
| Finland FI | 312 |
| Poland PL | 296 |
| Canada CA | 227 |
Affected software seen
| openssh 4.3 | 6 905 |
| openssh 5.3 | 2 127 |
| openssh 5.8 | 1 409 |
| openssh 5.1p1 | 1 138 |
| openssh 5.5 | 557 |
| openssh 5.1 | 547 |
| openssh 5.2 | 540 |
| openssh 4.5 | 461 |
| openssh 3.9p1 | 399 |
| openssh 4.3p2 | 397 |
| openssh 4.6 | 387 |
| openssh 5.6 | 346 |