CVE-2008-4609 The TCP implementation in (1) Linux, (2) platforms based on BSD Unix, (3) Microsoft Windows, (4) Cisco products, and probably other operating systems allows remote attackers to cause a denial of servi...
HighCVSS 7.1
EPSS 32.4%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The TCP implementation in (1) Linux, (2) platforms based on BSD Unix, (3) Microsoft Windows, (4) Cisco products, and probably other operating systems allows remote attackers to cause a denial of service (connection queue exhaustion) via multiple vectors that manipulate information in the TCP state table, as demonstrated by sockstress.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| bsd | All versions | No fix listed |
| bsd | = 4.1 | No fix listed |
| bsd | = 4.2 | No fix listed |
| bsd | = 4.3 | No fix listed |
| bsd | = 4.4 | No fix listed |
| bsdi bsd os | All versions | No fix listed |
| bsdi bsd os | = 1.1 | No fix listed |
| bsdi bsd os | = 2.0 | No fix listed |
| bsdi bsd os | = 2.0.1 | No fix listed |
| bsdi bsd os | = 2.1 | No fix listed |
| bsdi bsd os | = 3.0 | No fix listed |
| bsdi bsd os | = 3.1 | No fix listed |
| bsdi bsd os | = 3.2 | No fix listed |
| bsdi bsd os | = 4.0 | No fix listed |
| bsdi bsd os | = 4.0.1 | No fix listed |
| bsdi bsd os | = 4.1 | No fix listed |
| bsdi bsd os | = 4.2 | No fix listed |
| cisco ios | All versions | No fix listed |
| cisco ios | = 4.1 | No fix listed |
| cisco ios | = 4.1.1 | No fix listed |
| cisco ios | = 4.1.2 | No fix listed |
| cisco ios | = 8.2 | No fix listed |
| cisco ios | = 8.3 | No fix listed |
| cisco ios | = 9.0 | No fix listed |
| cisco ios | = 9.1 | No fix listed |
Show 175 more
| Product | Affected versions | Fixed in |
|---|---|---|
| cisco ios | = 9.14 | No fix listed |
| cisco ios | = 10.0 | No fix listed |
| cisco ios | = 10.3 | No fix listed |
| cisco ios | = 10.3(3.3) | No fix listed |
| cisco ios | = 10.3(3.4) | No fix listed |
| cisco ios | = 10.3(4.2) | No fix listed |
| cisco ios | = 10.3(4.3) | No fix listed |
| cisco ios | = 10.3(16) | No fix listed |
| cisco ios | = 10.3(19a) | No fix listed |
| cisco ios | = 11 | No fix listed |
| cisco ios | = 11.0 | No fix listed |
| cisco ios | = 11.0(12) | No fix listed |
| cisco ios | = 11.0(17) | No fix listed |
| cisco ios | = 11.0(17)bt | No fix listed |
| cisco ios | = 11.0(18) | No fix listed |
| cisco ios | = 11.0(20.3) | No fix listed |
| cisco ios | = 11.0(22a) | No fix listed |
| cisco ios | = 11.0(22b) | No fix listed |
| cisco ios | = 11.0(x) | No fix listed |
| cisco ios | = 11.0.12(a)bt | No fix listed |
| cisco ios | = 11.1 | No fix listed |
| cisco ios | = 11.1(5) | No fix listed |
| cisco ios | = 11.1(7) | No fix listed |
| cisco ios | = 11.1(7)aa | No fix listed |
| cisco ios | = 11.1(7)ca | No fix listed |
| cisco ios | = 11.1(9)ia | No fix listed |
| cisco ios | = 11.1(11) | No fix listed |
| cisco ios | = 11.1(12) | No fix listed |
| cisco ios | = 11.1(13) | No fix listed |
| cisco ios | = 11.1(13)aa | No fix listed |
| cisco ios | = 11.1(13)ca | No fix listed |
| cisco ios | = 11.1(13)ia | No fix listed |
| cisco ios | = 11.1(14) | No fix listed |
| cisco ios | = 11.1(15) | No fix listed |
| cisco ios | = 11.1(15)aa | No fix listed |
| cisco ios | = 11.1(15)ca | No fix listed |
| cisco ios | = 11.1(15)ia | No fix listed |
| cisco ios | = 11.1(16) | No fix listed |
| cisco ios | = 11.1(16)aa | No fix listed |
| cisco ios | = 11.1(16)ia | No fix listed |
| cisco ios | = 11.1(17) | No fix listed |
| cisco ios | = 11.1(17)cc | No fix listed |
| cisco ios | = 11.1(17)ct | No fix listed |
| cisco ios | = 11.1(18) | No fix listed |
| cisco ios | = 11.1(20)aa4 | No fix listed |
| cisco ios | = 11.1(22) | No fix listed |
| cisco ios | = 11.1(24) | No fix listed |
| cisco ios | = 11.1(24a) | No fix listed |
| cisco ios | = 11.1(24b) | No fix listed |
| cisco ios | = 11.1(24c) | No fix listed |
| cisco ios | = 11.1(28a)ct | No fix listed |
| cisco ios | = 11.1(28a)ia | No fix listed |
| cisco ios | = 11.1(36)ca2 | No fix listed |
| cisco ios | = 11.1(36)ca4 | No fix listed |
| cisco ios | = 11.1(36)cc2 | No fix listed |
| cisco ios | = 11.1(36)cc4 | No fix listed |
| cisco ios | = 11.1aa | No fix listed |
| cisco ios | = 11.1ca | No fix listed |
| cisco ios | = 11.1cc | No fix listed |
| cisco ios | = 11.1ct | No fix listed |
| cisco ios | = 11.1ia | No fix listed |
| cisco ios | = 11.2 | No fix listed |
| cisco ios | = 11.2(4) | No fix listed |
| cisco ios | = 11.2(4)f | No fix listed |
| cisco ios | = 11.2(4)f1 | No fix listed |
| cisco ios | = 11.2(4)xa | No fix listed |
| cisco ios | = 11.2(4)xaf | No fix listed |
| cisco ios | = 11.2(8) | No fix listed |
| cisco ios | = 11.2(8)p | No fix listed |
| cisco ios | = 11.2(8)sa1 | No fix listed |
| cisco ios | = 11.2(8)sa3 | No fix listed |
| cisco ios | = 11.2(8)sa5 | No fix listed |
| cisco ios | = 11.2(8.2)sa6 | No fix listed |
| cisco ios | = 11.2(8.9)sa6 | No fix listed |
| cisco ios | = 11.2(9)p | No fix listed |
| cisco ios | = 11.2(9)xa | No fix listed |
| cisco ios | = 11.2(10) | No fix listed |
| cisco ios | = 11.2(10)bc | No fix listed |
| cisco ios | = 11.2(11) | No fix listed |
| cisco ios | = 11.2(11b)t2 | No fix listed |
| cisco ios | = 11.2(14)gs2 | No fix listed |
| cisco ios | = 11.2(15)g | No fix listed |
| cisco ios | = 11.2(15a)p | No fix listed |
| cisco ios | = 11.2(15b) | No fix listed |
| cisco ios | = 11.2(16) | No fix listed |
| cisco ios | = 11.2(16)p | No fix listed |
| cisco ios | = 11.2(17) | No fix listed |
| cisco ios | = 11.2(18) | No fix listed |
| cisco ios | = 11.2(19)gs0.2 | No fix listed |
| cisco ios | = 11.2(19a)gs6 | No fix listed |
| cisco ios | = 11.2(23a)bc1 | No fix listed |
| cisco ios | = 11.2(26)p2 | No fix listed |
| cisco ios | = 11.2(26)p5 | No fix listed |
| cisco ios | = 11.2(26a) | No fix listed |
| cisco ios | = 11.2(26b) | No fix listed |
| cisco ios | = 11.2(26e) | No fix listed |
| cisco ios | = 11.2bc | No fix listed |
| cisco ios | = 11.2f | No fix listed |
| cisco ios | = 11.2gs | No fix listed |
| cisco ios | = 11.2p | No fix listed |
| cisco ios | = 11.2sa | No fix listed |
| cisco ios | = 11.2wa3 | No fix listed |
| cisco ios | = 11.2wa4 | No fix listed |
| cisco ios | = 11.2xa | No fix listed |
| cisco ios | = 11.3 | No fix listed |
| cisco ios | = 11.3(1) | No fix listed |
| cisco ios | = 11.3(1)ed | No fix listed |
| cisco ios | = 11.3(1)t | No fix listed |
| cisco ios | = 11.3(2)xa | No fix listed |
| cisco ios | = 11.3(7)db1 | No fix listed |
| cisco ios | = 11.3(8)db2 | No fix listed |
| cisco ios | = 11.3(8)t1 | No fix listed |
| cisco ios | = 11.3(11)b | No fix listed |
| cisco ios | = 11.3(11b) | No fix listed |
| cisco ios | = 11.3(11b)t2 | No fix listed |
| cisco ios | = 11.3(11c) | No fix listed |
| cisco ios | = 11.3(11d) | No fix listed |
| cisco ios | = 11.3aa | No fix listed |
| cisco ios | = 11.3da | No fix listed |
| cisco ios | = 11.3db | No fix listed |
| cisco ios | = 11.3ha | No fix listed |
| cisco ios | = 11.3ma | No fix listed |
| cisco ios | = 11.3na | No fix listed |
| cisco ios | = 11.3t | No fix listed |
| cisco ios | = 11.3wa4 | No fix listed |
| cisco ios | = 11.3xa | No fix listed |
| cisco ios | = 12.0 | No fix listed |
| cisco ios | = 12.0(1) | No fix listed |
| cisco ios | = 12.0(1)s | No fix listed |
| cisco ios | = 12.0(1)st | No fix listed |
| cisco ios | = 12.0(1)w | No fix listed |
| cisco ios | = 12.0(1)xa3 | No fix listed |
| cisco ios | = 12.0(1)xb | No fix listed |
| cisco ios | = 12.0(1)xe | No fix listed |
| cisco ios | = 12.0(2) | No fix listed |
| cisco ios | = 12.0(2)xc | No fix listed |
| cisco ios | = 12.0(2)xd | No fix listed |
| cisco ios | = 12.0(2)xe | No fix listed |
| cisco ios | = 12.0(2)xf | No fix listed |
| cisco ios | = 12.0(2)xg | No fix listed |
| cisco ios | = 12.0(2a) | No fix listed |
| cisco ios | = 12.0(2b) | No fix listed |
| cisco ios | = 12.0(3) | No fix listed |
| cisco ios | = 12.0(3)t2 | No fix listed |
| cisco ios | = 12.0(3)xe | No fix listed |
| cisco ios | = 12.0(3.2) | No fix listed |
| cisco ios | = 12.0(3.3)s | No fix listed |
| cisco ios | = 12.0(3.4)t | No fix listed |
| cisco ios | = 12.0(3.6)w5(9.0.5) | No fix listed |
| cisco ios | = 12.0(3d) | No fix listed |
| cisco ios | = 12.0(4) | No fix listed |
| cisco ios | = 12.0(4)s | No fix listed |
| cisco ios | = 12.0(4)t | No fix listed |
| cisco ios | = 12.0(4)xe | No fix listed |
| cisco ios | = 12.0(4)xe1 | No fix listed |
| cisco ios | = 12.0(4)xm | No fix listed |
| cisco ios | = 12.0(4)xm1 | No fix listed |
| cisco ios | = 12.0(5) | No fix listed |
| cisco ios | = 12.0(5)s | No fix listed |
| cisco ios | = 12.0(5)t | No fix listed |
| cisco ios | = 12.0(5)t1 | No fix listed |
| cisco ios | = 12.0(5)t2 | No fix listed |
| cisco ios | = 12.0(5)wc | No fix listed |
| cisco ios | = 12.0(5)wc2 | No fix listed |
| cisco ios | = 12.0(5)wc2b | No fix listed |
| cisco ios | = 12.0(5)wc3 | No fix listed |
| cisco ios | = 12.0(5)wc3b | No fix listed |
| cisco ios | = 12.0(5)wc5a | No fix listed |
| cisco ios | = 12.0(05)wc8 | No fix listed |
| cisco ios | = 12.0(5)wc9 | No fix listed |
| cisco ios | = 12.0(5)wc9a | No fix listed |
| cisco ios | = 12.0(5)wc11 | No fix listed |
| cisco ios | = 12.0(5)wc13 | No fix listed |
| cisco ios | = 12.0(5)wx | No fix listed |
| cisco ios | = 12.0(5)xe | No fix listed |
References
- blog.robertlee.name broken-link
- insecure.org broken-link
- [dailydave] 20081002 TCP Resource Exhaustion DoS Attack Speculation broken-link mailing-list
- HPSBMI02473 third-party-advisory vendor-advisory
- searchsecurity.techtarget.com.au broken-link
- 20090908 TCP State Manipulation Denial of Service Vulnerabilities in Multiple Cisco Products broken-link vendor-advisory
- 20081017 Cisco Response to Outpost24 TCP State Table Manipulation Denial of Service Vulnerabilities broken-link vendor-advisory
- www.cpni.gov.uk broken-link
- MDVSA-2013:150 broken-link vendor-advisory
- www.oracle.com third-party-advisory
- www.outpost24.com broken-link
- TA09-251A third-party-advisory us-government-resource
- MS09-048 patch third-party-advisory vendor-advisory
- oval:org.mitre.oval:def:6340 broken-link signature vdb-entry
- www.cert.fi broken-link
- Debian Security Tracker CVE-2008-4609 vendor-advisory