Unscored severity · published Oct 20, 2008
CVE-2008-4609
The TCP implementation in (1) Linux, (2) platforms based on BSD Unix, (3) Microsoft Windows, (4) Cisco products, and probably other operating systems allows remote attackers to…
–
CVSS
32.1%
EPSS
No
On KEV
Description
The TCP implementation in (1) Linux, (2) platforms based on BSD Unix, (3) Microsoft Windows, (4) Cisco products, and probably other operating systems allows remote attackers to cause a denial of service (connection queue exhaustion) via multiple vectors that manipulate information in the TCP state table, as demonstrated by sockstress.
Exploitation
Is it being used?
Exploit prediction (EPSS)32.1% · higher than 98% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
KE
Kernel · Linux
1.2.0; 1.3.0; 2.0; 2.0.1; 2.0.2; 2.0.3; +34 more · source: NVD
BS
Bsd · Bsd
4.1; 4.2; 4.3; 4.4 · source: NVD
BO
Bsd OS · Bsdi
1.1; 2.0; 2.0.1; 2.1; 3.0; 3.1; +5 more · source: NVD
CB
Catalyst Blade Switch 3020 Firmware · Cisco
before 12.2\(50\) · source: NVD
CB
Catalyst Blade Switch 3120 Firmware · Cisco
before 12.2\(50\) · source: NVD
CB
Catalyst Blade Switch 3120x Firmware · Cisco
before 12.2\(50\) · source: NVD
DR
Dragonflybsd · Dragonflybsd
1.0; 1.1; 1.2; 1.10.1 · source: NVD
FR
Freebsd · Freebsd
0.4_1; 1.0; 1.1; 1.1.5; 1.1.5.1; 1.2; +34 more · source: NVD
IO
Ios · Cisco
4.1; 4.1.1; 4.1.2; 8.2; 8.3; 9.0; +34 more · source: NVD
MI
Midnightbsd · Midnightbsd
All versions, or not specified · source: NVD
NE
Netbsd · Netbsd
1.0; 1.1; 1.2; 1.2.1; 1.3; 1.3.1; +26 more · source: NVD
OP
Openbsd · Openbsd
2.0; 2.1; 2.2; 2.3; 2.4; 2.5; +18 more · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2008-4609
CVE.org
https://www.cve.org/CVERecord?id=CVE-2008-4609
Broken Link
http://blog.robertlee.name/2008/10/conjecture-speculation.html
Broken Link
http://insecure.org/stf/tcp-dos-attack-explained.html
Broken Link
http://lists.immunitysec.com/pipermail/dailydave/2008-October/005360.html
Third Party Advisory
http://marc.info/?l=bugtraq&m=125856010926699&w=2
Broken Link
http://searchsecurity.techtarget.com.au/articles/27154-TCP-is-fundamentally-borked
Broken Link
http://www.cisco.com/en/US/products/products_security_advisory09186a0080af511d.shtml
More from Kernel
9.8
CVE-2025-39682
tls: fix handling of zero-length records on the rx_list
8.8
CVE-2026-53266
netfilter: bridge: make ebt_snat ARP rewrite writable
8.8
CVE-2013-6282
Linux Kernel Improper Input Validation Vulnerability
8.4
CVE-2022-0185
Linux Kernel Heap-Based Buffer Overflow Vulnerability
8.4
CVE-2013-2094
Linux Kernel Privilege Escalation Vulnerability