← Database

CVE-2008-4609

HIGH CVSS: 7.1 Published: 2008-10-20 Modified: 2026-06-16

Description

The TCP implementation in (1) Linux, (2) platforms based on BSD Unix, (3) Microsoft Windows, (4) Cisco products, and probably other operating systems allows remote attackers to cause a denial of service (connection queue exhaustion) via multiple vectors that manipulate information in the TCP state table, as demonstrated by sockstress.

Affected Platforms

Trustedbsd TrustedbsdMicrosoft Windows Server 2008Cisco Catalyst Blade Switch 3020Midnightbsd MidnightbsdLinux Linux KernelCisco Catalyst Blade Switch 3120XOracle SolarisCisco Catalyst Blade Switch 3020 FirmwareMicrosoft Windows Server 2003Cisco Catalyst Blade Switch 3120X Firmware

Weakness Type

CWE-16, NVD-CWE-noinfo

References