CVE-2008-4609

Fixed in a distro release EPSS 32%

The TCP implementation in (1) Linux, (2) platforms based on BSD Unix, (3) Microsoft Windows, (4) Cisco products, and probably other operating systems allows remote attackers to cause a denial of service (connection queue exhaustion) via multiple vectors that manipulate information in the TCP state table, as demonstrated by sockstress.

Published 2008-10-20 · CVE record · OSV

Products: bsd, bsdi bsd_os, cisco ios, dragonflybsd, freebsd, linux_kernel, midnightbsd, netbsd, openbsd, trustedbsd, microsoft windows_2000, microsoft windows_server_2003, microsoft windows_server_2008, microsoft windows_vista, microsoft windows_xp, cisco catalyst_blade_switch_3020_firmware, cisco catalyst_blade_switch_3120_firmware, cisco catalyst_blade_switch_3120x_firmware, oracle solaris

Distro releases