CVE-2011-5000: The ssh_gssapi_parse_ename function in gss-serv.c in OpenSSH 5.8 and earlier, when gssapi-with-mic authenti...

Security readout for executives and security teams

This is an old OpenSSH denial-of-service issue. If a server uses OpenSSH 5.8 or earlier and GSSAPI with MIC authentication is enabled, an authenticated remote user may be able to consume memory and disrupt SSH availability. Exposure is most likely on legacy systems running OpenSSH 5.8 or earlier with GSSAPI authentication enabled. Modern patched OpenSSH deployments are unlikely to be affected based on the supplied sources. Treat this as a legacy exposure cleanup item unless affected SSH servers are externally reachable or operationally critical. It can disrupt administration access, but the sources indicate authenticated access is required. Mitigation focus: Identify servers running OpenSSH 5.8 or earlier.; Check whether GSSAPI or gssapi-with-mic authentication is enabled.; Apply applicable vendor security updates, including Red Hat guidance where relevant..

Prepared

Jun 24, 2026, 12:52 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.