Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
The ssh_gssapi_parse_ename function in gss-serv.c in OpenSSH 5.8 and earlier, when gssapi-with-mic authentication is enabled, allows remote authenticated users to cause a denial of service (memory consumption) via a large value in a certain length field. NOTE: there may be limited scenarios in which this issue is relevant.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
OpenSSH数字错误漏洞
Vulnerability Description
OpenSSH（OpenBSD Secure Shell）是OpenBSD计划组所维护的一套用于安全访问远程计算机的连接工具。该工具是SSH协议的开源实现，支持对所有的传输进行加密，可有效阻止窃听、连接劫持以及其他网络级的攻击。 OpenSSH 5.8及之前版本中的gss-serv.c中的ssh_gssapi_parse_ename函数中存在漏洞。当gssapi-with-mic验证被激活时，远程认证用户可利用该漏洞借助在某一长度域中的大值，导致拒绝服务（内存消耗）。
CVSS Information
N/A
Vulnerability Type
N/A