CVE-2008-4609

Severity CVSS v4.0:
Pending analysis
Type:
CWE-16 Configuration Errors
Publication date:
20/10/2008
Last modified:
09/04/2025

Description

The TCP implementation in (1) Linux, (2) platforms based on BSD Unix, (3) Microsoft Windows, (4) Cisco products, and probably other operating systems allows remote attackers to cause a denial of service (connection queue exhaustion) via multiple vectors that manipulate information in the TCP state table, as demonstrated by sockstress.

Vulnerable products and versions

CPE From Up to
cpe:2.3:o:bsd:bsd:-:*:*:*:*:*:*:*
cpe:2.3:o:bsd:bsd:4.1:*:*:*:*:*:*:*
cpe:2.3:o:bsd:bsd:4.2:*:*:*:*:*:*:*
cpe:2.3:o:bsd:bsd:4.3:*:*:*:*:*:*:*
cpe:2.3:o:bsd:bsd:4.4:*:*:*:*:*:*:*
cpe:2.3:o:bsdi:bsd_os:-:*:*:*:*:*:*:*
cpe:2.3:o:bsdi:bsd_os:1.1:*:*:*:*:*:*:*
cpe:2.3:o:bsdi:bsd_os:2.0:*:*:*:*:*:*:*
cpe:2.3:o:bsdi:bsd_os:2.0.1:*:*:*:*:*:*:*
cpe:2.3:o:bsdi:bsd_os:2.1:*:*:*:*:*:*:*
cpe:2.3:o:bsdi:bsd_os:3.0:*:*:*:*:*:*:*
cpe:2.3:o:bsdi:bsd_os:3.1:*:*:*:*:*:*:*
cpe:2.3:o:bsdi:bsd_os:3.2:*:*:*:*:*:*:*
cpe:2.3:o:bsdi:bsd_os:4.0:*:*:*:*:*:*:*
cpe:2.3:o:bsdi:bsd_os:4.0.1:*:*:*:*:*:*:*


References to Advisories, Solutions, and Tools