{"action":"Upgrade openssh to 1:5.9p1-1 or later.","affected":[{"fixed":"1:5.9p1-1","introduced":"0"}],"component":"openssh","cve_ids":[],"ecosystem":"Debian","ecosystem_qualifier":"Debian:14","exploited":false,"fixed_versions":["1:5.9p1-1"],"id":"tcs_01M5N9XZ296FF20SVRK8DEFQ68","modified_at":"2026-10-23T17:47:26.353184907Z","published_at":"2012-04-05T14:55:03.590Z","references":["https://osv.dev/vulnerability/DEBIAN-CVE-2011-5000","https://security-tracker.debian.org/tracker/CVE-2011-5000"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"DEBIAN-CVE-2011-5000#Debian:14/openssh","url":"https://osv.dev/vulnerability/DEBIAN-CVE-2011-5000"}],"summary":"The ssh_gssapi_parse_ename function in gss-serv.c in OpenSSH 5.8 and earlier, when gssapi-with-mic authentication is enabled, allows remote authenticated users to cause a denial of service (memory con"}