CVE-2011-5000

CVE-2011-5000 describes a denial-of-service vulnerability in OpenSSH versions 5.8 and earlier, specifically within the ssh_gssapi_parse_ename function when gssapi-with-mic authentication is enabled. An authenticated attacker can exploit this by sending a large value in a length field, leading to excessive memory consumption. The CVSS score of 3.5 indicates a low severity, with a network attack vector, medium attack complexity, and potential for partial availability impact. There is no evidence of active exploitation, public exploit code, or significant community discussion surrounding this vulnerability.