CVE-2008-4609
Last modified
CVE-2008-4609 is a vulnerability of currently unknown severity. The TCP implementation in (1) Linux, (2) platforms based on BSD Unix, (3) Microsoft Windows, (4) Cisco products, and probably other operating systems allows remote attackers to cause a denial of service (connection queue exhaustion) via multiple vectors that manipulate information in the TCP state table, as demonstrated by sockstress.. EPSS estimates a 32.12% chance of exploitation in the next 30 days.
Description
The TCP implementation in (1) Linux, (2) platforms based on BSD Unix, (3) Microsoft Windows, (4) Cisco products, and probably other operating systems allows remote attackers to cause a denial of service (connection queue exhaustion) via multiple vectors that manipulate information in the TCP state table, as demonstrated by sockstress.
Metrics
Weakness Enumeration
Affected Software
| Vendor | Product | Versions | Update |
|---|---|---|---|
| Bsd | Bsd | All versions | — |
| Bsd | Bsd | 4.1 | — |
| Bsd | Bsd | 4.2 | — |
| Bsd | Bsd | 4.3 | — |
| Bsd | Bsd | 4.4 | — |
| Bsdi | Bsd Os | All versions | — |
| Bsdi | Bsd Os | 1.1 | — |
| Bsdi | Bsd Os | 2.0 | — |
| Bsdi | Bsd Os | 2.0.1 | — |
| Bsdi | Bsd Os | 2.1 | — |
| Bsdi | Bsd Os | 3.0 | — |
| Bsdi | Bsd Os | 3.1 | — |
| Bsdi | Bsd Os | 3.2 | — |
| Bsdi | Bsd Os | 4.0 | — |
| Bsdi | Bsd Os | 4.0.1 | — |
| Bsdi | Bsd Os | 4.1 | — |
| Bsdi | Bsd Os | 4.2 | — |
| Cisco | Ios | All versions | — |
| Cisco | Ios | 4.1 | — |
| Cisco | Ios | 4.1.1 | — |
| Cisco | Ios | 4.1.2 | — |
| Cisco | Ios | 8.2 | — |
| Cisco | Ios | 8.3 | — |
| Cisco | Ios | 9.0 | — |
| Cisco | Ios | 9.1 | — |
| Cisco | Ios | 9.14 | — |
| Cisco | Ios | 10.0 | — |
| Cisco | Ios | 10.3 | — |
| Cisco | Ios | 10.3\(3.3\) | — |
| Cisco | Ios | 10.3\(3.4\) | — |
| Cisco | Ios | 10.3\(4.2\) | — |
| Cisco | Ios | 10.3\(4.3\) | — |
| Cisco | Ios | 10.3\(16\) | — |
| Cisco | Ios | 10.3\(19a\) | — |
| Cisco | Ios | 11 | — |
| Cisco | Ios | 11.0 | — |
| Cisco | Ios | 11.0\(12\) | — |
| Cisco | Ios | 11.0\(17\) | — |
| Cisco | Ios | 11.0\(17\)bt | — |
| Cisco | Ios | 11.0\(18\) | — |
| Cisco | Ios | 11.0\(20.3\) | — |
| Cisco | Ios | 11.0\(22a\) | — |
| Cisco | Ios | 11.0\(22b\) | — |
| Cisco | Ios | 11.0\(x\) | — |
| Cisco | Ios | 11.0.12\(a\)bt | — |
| Cisco | Ios | 11.1 | — |
| Cisco | Ios | 11.1\(5\) | — |
| Cisco | Ios | 11.1\(7\) | — |
| Cisco | Ios | 11.1\(7\)aa | — |
| Cisco | Ios | 11.1\(7\)ca | — |
Showing 50 of 2035 affected configurations. See NVD for the full list.
References
- http://marc.info/?l=bugtraq&m=125856010926699&w=2Third Party Advisory
- http://www.oracle.com/technetwork/topics/security/cpujul2012-392727.htmlThird Party Advisory
- http://www.us-cert.gov/cas/techalerts/TA09-251A.htmlThird Party Advisory, US Government Resource
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-048Patch, Third Party Advisory
- http://marc.info/?l=bugtraq&m=125856010926699&w=2Third Party Advisory
- http://www.oracle.com/technetwork/topics/security/cpujul2012-392727.htmlThird Party Advisory
- http://www.us-cert.gov/cas/techalerts/TA09-251A.htmlThird Party Advisory, US Government Resource
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-048Patch, Third Party Advisory
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2008-4609?
How severe is CVE-2008-4609?
How do I fix CVE-2008-4609?
Are you affected by CVE-2008-4609?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST