CVE search · CVE-2008-4609
CVE-2008-4609
high 7.1
The TCP implementation in (1) Linux, (2) platforms based on BSD Unix, (3) Microsoft Windows, (4) Cisco products, and probably other operating systems allows remote attackers to cause a denial of service (connection queue exhaustion) via multiple vectors that manipulate information in the TCP state table, as demonstrated by sockstress.
Details
- Status
- Modified
- Published
- Last changed
- Source
- cve@mitre.org
- Weakness
- CWE-16, NVD-CWE-noinfo
Severity
| Version | Score | Vector | Source |
|---|---|---|---|
| CVSS 2.0 | high 7.1 | AV:N/AC:M/Au:N/C:N/I:N/A:C |
nvd@nist.govPrimary |
Affected products
Vendor and product from the NVD’s CPE applicability statements. Versions and conditions are on the NVD’s page.
- bsd · bsd
- bsdi · bsd_os
- cisco · ios
- dragonflybsd · dragonflybsd
- freebsd · freebsd
- linux · linux_kernel
- midnightbsd · midnightbsd
- netbsd · netbsd
- openbsd · openbsd
- trustedbsd · trustedbsd
- microsoft · windows_2000
- microsoft · windows_server_2003
- microsoft · windows_server_2008
- microsoft · windows_vista
- microsoft · windows_xp
- cisco · catalyst_blade_switch_3020_firmware
- cisco · catalyst_blade_switch_3120_firmware
- cisco · catalyst_blade_switch_3120x_firmware
- oracle · solaris
References
- http://blog.robertlee.name/2008/10/conjecture-speculation.htmlBroken Link
- http://insecure.org/stf/tcp-dos-attack-explained.htmlBroken Link
- http://lists.immunitysec.com/pipermail/dailydave/2008-October/005360.htmlBroken Link
- http://marc.info/?l=bugtraq&m=125856010926699&w=2Third Party Advisory
- http://searchsecurity.techtarget.com.au/articles/27154-TCP-is-fundamentally-borkedBroken Link
- http://www.cisco.com/en/US/products/products_security_advisory09186a0080af511d.shtmlBroken Link
- http://www.cisco.com/en/US/products/products_security_response09186a0080a15120.htmlBroken Link
- http://www.cpni.gov.uk/Docs/tn-03-09-security-assessment-TCP.pdfBroken Link
- http://www.mandriva.com/security/advisories?name=MDVSA-2013:150Broken Link
- http://www.oracle.com/technetwork/topics/security/cpujul2012-392727.htmlThird Party Advisory
- http://www.outpost24.com/news/news-2008-10-02.htmlBroken Link
- http://www.us-cert.gov/cas/techalerts/TA09-251A.htmlThird Party AdvisoryUS Government Resource
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-048PatchThird Party Advisory
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6340Broken Link
- https://www.cert.fi/haavoittuvuudet/2008/tcp-vulnerabilities.htmlBroken Link
- http://blog.robertlee.name/2008/10/conjecture-speculation.htmlBroken Link
- http://insecure.org/stf/tcp-dos-attack-explained.htmlBroken Link
- http://lists.immunitysec.com/pipermail/dailydave/2008-October/005360.htmlBroken Link
- http://marc.info/?l=bugtraq&m=125856010926699&w=2Third Party Advisory
- http://searchsecurity.techtarget.com.au/articles/27154-TCP-is-fundamentally-borkedBroken Link
- http://www.cisco.com/en/US/products/products_security_advisory09186a0080af511d.shtmlBroken Link
- http://www.cisco.com/en/US/products/products_security_response09186a0080a15120.htmlBroken Link
- http://www.cpni.gov.uk/Docs/tn-03-09-security-assessment-TCP.pdfBroken Link
- http://www.mandriva.com/security/advisories?name=MDVSA-2013:150Broken Link
- http://www.oracle.com/technetwork/topics/security/cpujul2012-392727.htmlThird Party Advisory
- http://www.outpost24.com/news/news-2008-10-02.htmlBroken Link
- http://www.us-cert.gov/cas/techalerts/TA09-251A.htmlThird Party AdvisoryUS Government Resource
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-048PatchThird Party Advisory
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6340Broken Link
- https://www.cert.fi/haavoittuvuudet/2008/tcp-vulnerabilities.htmlBroken Link