← Vulnerability feed

Vulnerability record · CVE-2008-4609 · published 20 October 2008

CVE-2008-4609: Bsd vulnerability

Bsd · Bsd

The TCP implementation in (1) Linux, (2) platforms based on BSD Unix, (3) Microsoft Windows, (4) Cisco products, and probably other operating systems allows remote attackers to cause a denial of service (connection queue exhaustion) via multiple vectors that manipulate information in the TCP state table, as demonstrated by sockstress.

7.1 CVSS 2.0 High EPSS 32% · top 1.7% CWE-16 · CWE-16
7.1CVSS 2.0 base score
32%EPSS exploitation probability, 30 days
NoNot in CISA KEV
19Affected product versions listed by NVD
30References
16 Jun 2026Last modified by NVD

Description

The TCP implementation in (1) Linux, (2) platforms based on BSD Unix, (3) Microsoft Windows, (4) Cisco products, and probably other operating systems allows remote attackers to cause a denial of service (connection queue exhaustion) via multiple vectors that manipulate information in the TCP state table, as demonstrated by sockstress.

AV:N/AC:M/Au:N/C:N/I:N/A:C

Affected products

19 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
http://blog.robertlee.name/2008/10/conjecture-speculation.html Broken Link
http://insecure.org/stf/tcp-dos-attack-explained.html Broken Link
http://lists.immunitysec.com/pipermail/dailydave/2008-October/005360.html Broken Link
http://marc.info/?l=bugtraq&m=125856010926699&w=2 Third Party Advisory
http://searchsecurity.techtarget.com.au/articles/27154-TCP-is-fundamentally-borked Broken Link
http://www.cisco.com/en/US/products/products_security_advisory09186a0080af511d.shtml Broken Link
http://www.cisco.com/en/US/products/products_security_response09186a0080a15120.html Broken Link
http://www.cpni.gov.uk/Docs/tn-03-09-security-assessment-TCP.pdf Broken Link
http://www.mandriva.com/security/advisories?name=MDVSA-2013:150 Broken Link
http://www.oracle.com/technetwork/topics/security/cpujul2012-392727.html Third Party Advisory
http://www.outpost24.com/news/news-2008-10-02.html Broken Link
http://www.us-cert.gov/cas/techalerts/TA09-251A.html Third Party AdvisoryUS Government Resource
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-048 PatchThird Party Advisory
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6340 Broken Link
https://www.cert.fi/haavoittuvuudet/2008/tcp-vulnerabilities.html Broken Link
http://blog.robertlee.name/2008/10/conjecture-speculation.html Broken Link
http://insecure.org/stf/tcp-dos-attack-explained.html Broken Link
http://lists.immunitysec.com/pipermail/dailydave/2008-October/005360.html Broken Link
http://marc.info/?l=bugtraq&m=125856010926699&w=2 Third Party Advisory
http://searchsecurity.techtarget.com.au/articles/27154-TCP-is-fundamentally-borked Broken Link
http://www.cisco.com/en/US/products/products_security_advisory09186a0080af511d.shtml Broken Link
http://www.cisco.com/en/US/products/products_security_response09186a0080a15120.html Broken Link
http://www.cpni.gov.uk/Docs/tn-03-09-security-assessment-TCP.pdf Broken Link
http://www.mandriva.com/security/advisories?name=MDVSA-2013:150 Broken Link
http://www.oracle.com/technetwork/topics/security/cpujul2012-392727.html Third Party Advisory
http://www.outpost24.com/news/news-2008-10-02.html Broken Link
http://www.us-cert.gov/cas/techalerts/TA09-251A.html Third Party AdvisoryUS Government Resource
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-048 PatchThird Party Advisory
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6340 Broken Link
https://www.cert.fi/haavoittuvuudet/2008/tcp-vulnerabilities.html Broken Link

Track CVE-2008-4609 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

10.0CVE-1999-0879Bsdi bsd os vulnerabilityBuffer overflow in WU-FTPD and related FTP servers allows remote attackers to gain root privileges via macro variables in a message file.EPSS 9.7%10.0CVE-1999-0798Bsdi bsd os vulnerabilityBuffer overflow in bootpd on OpenBSD, FreeBSD, and Linux systems via a malformed header type.EPSS 1.6%10.0CVE-1999-0002Bsdi bsd os memory buffer overflow vulnerabilityBuffer overflow in NFS mountd gives root access to remote attackers, mostly in Linux systems.EPSS 28%10.0CVE-1999-0009Data general dg ux vulnerabilityInverse query buffer overflow in BIND 4.9 and BIND 8 Releases.EPSS 29%10.0CVE-1999-0323Bsdi bsd os vulnerabilityFreeBSD mmap function allows users to modify append-only or immutable files.EPSS 1.4%10.0CVE-1999-0042University of washington imap vulnerabilityBuffer overflow in University of Washington's implementation of IMAP and POP servers.EPSS 13%10.0CVE-1999-0165Sun nfs vulnerabilityNFS cache poisoning.EPSS 2.0%10.0CVE-1999-0046rlogin buffer overflow via TERM environment variableThe rlogin program contains a classic buffer overflow (CWE-120) triggered through the TERM environment variable. Because rlogin is a network login se…EPSS 52%analysed

Source: NIST National Vulnerability Database (record CVE-2008-4609), CISA KEV, FIRST EPSS (scores of 2026-09-27). This page is refreshed as NVD updates the record.