Oval Definition:oval:org.opensuse.security:def:20115000
Revision Date:2022-08-07Version:1
Title:CVE-2011-5000
Description:

The ssh_gssapi_parse_ename function in gss-serv.c in OpenSSH 5.8 and earlier, when gssapi-with-mic authentication is enabled, allows remote authenticated users to cause a denial of service (memory consumption) via a large value in a certain length field. NOTE: there may be limited scenarios in which this issue is relevant.
Family:unixClass:vulnerability
Status:Reference(s):CVE-2011-5000
Mitre CVE-2011-5000
SUSE CVE-2011-5000
TID7022091
TID7022102
Platform(s):SUSE CORE 9 for AMD64 and Intel EM64T
SUSE Linux Enterprise Desktop 10 SP4 for AMD64 and Intel EM64T
SUSE Linux Enterprise Desktop 10 SP4 for x86
SUSE Linux Enterprise Desktop 11 SP1
SUSE Linux Enterprise Desktop 11 SP2
SUSE Linux Enterprise Micro 5.2
SUSE Linux Enterprise Server 10 SP4 for AMD64 and Intel EM64T
SUSE Linux Enterprise Server 10 SP4 for IBM POWER
SUSE Linux Enterprise Server 10 SP4 for IBM zSeries 64bit
SUSE Linux Enterprise Server 10 SP4 for IPF
SUSE Linux Enterprise Server 10 SP4 for x86
SUSE Linux Enterprise Server 11 SP1
SUSE Linux Enterprise Server 11 SP1 for Teradata
SUSE Linux Enterprise Server 11 SP1 for VMware
SUSE Linux Enterprise Server 11 SP1-TERADATA
SUSE Linux Enterprise Server 11 SP2
SUSE Linux Enterprise Server 11 SP3
SUSE Linux Enterprise Server 11 SP4
SUSE Linux Enterprise Server 11-SECURITY
SUSE Linux Enterprise Server for SAP Applications 11 SP1-TERADATA
SUSE Linux Enterprise Server for SAP Applications 12 SP3
SUSE Linux Enterprise Teradata 10 SP3 for AMD64 and Intel EM64T
Product(s):
Definition Synopsis
  • SUSE Linux Enterprise Server 11 SP3 is installed
  • AND Package Information
  • openssh-6.2p2-0.9 is installed
  • OR openssh-askpass-6.2p2-0.9 is installed
  • Definition Synopsis
  • sles10-sp4 is installed
  • AND Package Information
  • openssh-askpass less than 5.1p1-41.12.8
  • OR openssh less than 5.1p1-41.12.8
  • Definition Synopsis
  • Release Information
  • SUSE Linux Enterprise Server 11 SP3 is installed
  • AND
  • openssh-6.2p2-0.9.1 is installed
  • OR openssh-askpass-6.2p2-0.9.1 is installed
  • OR Package Information
  • SUSE Linux Enterprise Server 11 SP4 is installed
  • AND
  • openssh-6.6p1-4.7 is installed
  • OR openssh-fips-6.6p1-4.7 is installed
  • Definition Synopsis
  • Release Information
  • SUSE Linux Enterprise Server 11 SP1 is installed
  • AND
  • openssh-5.1p1-41.55 is installed
  • OR openssh-askpass-5.1p1-41.55 is installed
  • OR Package Information
  • SUSE Linux Enterprise Server 11 SP2 is installed
  • AND
  • openssh-5.1p1-41.55 is installed
  • OR openssh-askpass-5.1p1-41.55 is installed
  • OR Package Information
  • SUSE Linux Enterprise Server 11 SP3 is installed
  • AND
  • openssh-6.2p2-0.9 is installed
  • OR openssh-askpass-6.2p2-0.9 is installed
  • OR Package Information
  • SUSE Linux Enterprise Server 11 SP4 is installed
  • AND
  • openssh-6.6p1-4 is installed
  • OR openssh-fips-6.6p1-4 is installed
  • Definition Synopsis
  • Release Information
  • SUSE Linux Enterprise Server 11 SP4 is installed
  • AND
  • openssh-6.6p1-4 is installed
  • OR openssh-fips-6.6p1-4 is installed
  • OR Package Information
  • SUSE Linux Enterprise Server 11 SP3 is installed
  • AND
  • openssh-6.2p2-0.9 is installed
  • OR openssh-askpass-6.2p2-0.9 is installed
  • OR Package Information
  • SUSE Linux Enterprise Server 11-SECURITY is installed
  • AND
  • openssh-openssl1-6.6p1-10 is installed
  • OR openssh-openssl1-helpers-6.6p1-10 is installed
  • OR Package Information
  • SUSE Linux Enterprise Server 11 SP1 is installed
  • OR SUSE Linux Enterprise Server 11 SP2 is installed
  • AND
  • openssh-5.1p1-41.55 is installed
  • OR openssh-askpass-5.1p1-41.55 is installed
  • Definition Synopsis
  • Release Information
  • SUSE Linux Enterprise Server 11 SP4 is installed
  • AND
  • openssh-6.6p1-4 is installed
  • OR openssh-fips-6.6p1-4 is installed
  • OR Package Information
  • SUSE Linux Enterprise Server 11 SP3 is installed
  • AND
  • openssh-6.2p2-0.9 is installed
  • OR openssh-askpass-6.2p2-0.9 is installed
  • OR Package Information
  • SUSE Linux Enterprise Server 11-SECURITY is installed
  • AND
  • openssh-openssl1-6.6p1-10 is installed
  • OR openssh-openssl1-helpers-6.6p1-10 is installed
  • OR Package Information
  • SUSE Linux Enterprise Server 11 SP1 is installed
  • OR SUSE Linux Enterprise Server 11 SP1-TERADATA is installed
  • OR SUSE Linux Enterprise Server 11 SP2 is installed
  • OR SUSE Linux Enterprise Server for SAP Applications 11 SP1-TERADATA is installed
  • AND
  • openssh-5.1p1-41.55 is installed
  • OR openssh-askpass-5.1p1-41.55 is installed
  • OR openssh-askpass-gnome-5.1p1-41.51 is installed
  • Definition Synopsis
  • Release Information
  • SUSE Linux Enterprise Server 11-SECURITY is installed
  • AND
  • openssh-openssl1-6.6p1-10.1 is installed
  • OR openssh-openssl1-helpers-6.6p1-10.1 is installed
  • OR Package Information
  • SUSE Linux Enterprise Server 11 SP3 is installed
  • AND
  • openssh-6.2p2-0.9.1 is installed
  • OR openssh-askpass-6.2p2-0.9.1 is installed
  • OR Package Information
  • SUSE Linux Enterprise Server 11 SP4 is installed
  • AND
  • openssh-6.6p1-4.7 is installed
  • OR openssh-fips-6.6p1-4.7 is installed
  • OR Package Information
  • SUSE Linux Enterprise Server 11 SP1 is installed
  • OR SUSE Linux Enterprise Server 11 SP1-TERADATA is installed
  • OR SUSE Linux Enterprise Server 11 SP2 is installed
  • AND
  • openssh-5.1p1-41.55.1 is installed
  • OR openssh-askpass-5.1p1-41.55.1 is installed
  • OR openssh-askpass-gnome-5.1p1-41.51.1 is installed
  • Definition Synopsis
  • SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed
  • AND Package Information
  • openssh is not affected
  • OR openssh-fips is not affected
  • OR openssh-helpers is not affected
  • Definition Synopsis
  • SUSE Linux Enterprise Micro 5.2 is installed
  • AND Package Information
  • openssh is not affected
  • OR openssh-clients is not affected
  • OR openssh-common is not affected
  • OR openssh-fips is not affected
  • OR openssh-server is not affected
  • BACK