CVE Feed

    Dashboard / CVE / CVE-2008-4609

    CVE-2008-4609

    The TCP implementation in (1) Linux, (2) platforms based on BSD Unix, (3) Microsoft Windows, (4) Cisco products, and probably other operating systems allows remote attackers to cause a denial of service (connection queue exhaustion) via multiple vectors that manipulate information in the TCP state table, as demonstrated by sockstress.

    Published:Oct 20, 2008
    Last Modified:Apr 23, 2026
    EPS:Oct 20, 2008
    EPSS Score:0.01878
    CVSS Score:7.1

    Affected Products

    Vendor
    Bsd
    Product
    Bsd
    Vendor
    Bsdi
    Product
    Bsd Os
    Vendor
    Cisco
    Product
    Catalyst Blade Switch 3020
    Vendor
    Cisco
    Product
    Catalyst Blade Switch 3020 Firmware
    Vendor
    Cisco
    Product
    Catalyst Blade Switch 3120
    Vendor
    Cisco
    Product
    Catalyst Blade Switch 3120 Firmware
    Vendor
    Cisco
    Product
    Catalyst Blade Switch 3120x
    Vendor
    Cisco
    Product
    Catalyst Blade Switch 3120x Firmware
    Vendor
    Cisco
    Product
    Ios
    Vendor
    Dragonflybsd
    Product
    Dragonflybsd
    Vendor
    Freebsd
    Product
    Freebsd
    Vendor
    Linux
    Product
    Linux Kernel
    Vendor
    Microsoft
    Product
    Windows 2000
    Vendor
    Microsoft
    Product
    Windows Server 2003
    Vendor
    Microsoft
    Product
    Windows Server 2008
    Vendor
    Microsoft
    Product
    Windows Vista
    Vendor
    Microsoft
    Product
    Windows Xp
    Vendor
    Midnightbsd
    Product
    Midnightbsd
    Vendor
    Netbsd
    Product
    Netbsd
    Vendor
    Openbsd
    Product
    Openbsd
    Vendor
    Oracle
    Product
    Solaris
    Vendor
    Trustedbsd
    Product
    Trustedbsd

    Exploits

    https://github.com/mrclki/sockstress

    Common Weakness Enumeration

    No CWE recorded yet

    Common Attack Pattern Enumeration and Classification (CAPEC)

    No CAPEC recorded yet

    Related CVEs

    CVE-2014-7250 (CVSS 5) — The TCP stack in 4.3BSD Net/2, as used in FreeBSD 5.4, NetBSD possibly 2.0, and OpenBSD possibly 3.6, does not…
    CVE-2007-2191 (CVSS 6.8) — Multiple cross-site scripting (XSS) vulnerabilities in freePBX 2.2.x allow remote attackers to inject arbitrar…
    CVE-2001-0670 (CVSS 7.5) — Buffer overflow in BSD line printer daemon (in.lpd or lpd) in various BSD-based operating systems allows remot…
    CVE-1999-1102 (CVSS 2.1) — lpr on SunOS 4.1.1, BSD 4.3, A/UX 2.0.1, and other BSD-based operating systems allows local users to create or…
    CVE-1999-1394 (CVSS 2.1) — BSD 4.4 based operating systems, when running at security level 1, allow the root user to clear the immutable …
    CVE-1999-1214 (CVSS 2.1) — The asynchronous I/O facility in 4.4 BSD kernel does not check user credentials when setting the recipient of …
    CVE-1999-1098 (CVSS 5) — Vulnerability in BSD Telnet client with encryption and Kerberos 4 authentication allows remote attackers to de…
    CVE-1999-1471 (CVSS 7.2) — Buffer overflow in passwd in BSD based operating systems 4.3 and earlier allows local users to gain root privi…

    References

    http://blog.robertlee.name/2008/10/conjecture-speculation.html
    http://insecure.org/stf/tcp-dos-attack-explained.html
    http://lists.immunitysec.com/pipermail/dailydave/2008-October/005360.html
    http://marc.info/?l=bugtraq&m=125856010926699&w=2
    http://searchsecurity.techtarget.com.au/articles/27154-TCP-is-fundamentally-borked
    http://www.cisco.com/en/US/products/products_security_advisory09186a0080af511d.shtml
    http://www.cisco.com/en/US/products/products_security_response09186a0080a15120.html
    http://www.cpni.gov.uk/Docs/tn-03-09-security-assessment-TCP.pdf
    http://www.mandriva.com/security/advisories?name=MDVSA-2013:150
    http://www.oracle.com/technetwork/topics/security/cpujul2012-392727.html
    http://www.outpost24.com/news/news-2008-10-02.html
    http://www.us-cert.gov/cas/techalerts/TA09-251A.html
    https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-048
    https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6340
    https://www.cert.fi/haavoittuvuudet/2008/tcp-vulnerabilities.html
    http://blog.robertlee.name/2008/10/conjecture-speculation.html
    http://insecure.org/stf/tcp-dos-attack-explained.html
    http://lists.immunitysec.com/pipermail/dailydave/2008-October/005360.html
    http://marc.info/?l=bugtraq&m=125856010926699&w=2
    http://searchsecurity.techtarget.com.au/articles/27154-TCP-is-fundamentally-borked
    http://www.cisco.com/en/US/products/products_security_advisory09186a0080af511d.shtml
    http://www.cisco.com/en/US/products/products_security_response09186a0080a15120.html
    http://www.cpni.gov.uk/Docs/tn-03-09-security-assessment-TCP.pdf
    http://www.mandriva.com/security/advisories?name=MDVSA-2013:150
    http://www.oracle.com/technetwork/topics/security/cpujul2012-392727.html
    http://www.outpost24.com/news/news-2008-10-02.html
    http://www.us-cert.gov/cas/techalerts/TA09-251A.html
    https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-048
    https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6340
    https://www.cert.fi/haavoittuvuudet/2008/tcp-vulnerabilities.html

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High