CVE-2008-4609: Bsd

High severity, CVSS 7.1. EPSS: 32.1% chance of exploitation in the next 30 days.

The TCP implementation in (1) Linux, (2) platforms based on BSD Unix, (3) Microsoft Windows, (4) Cisco products, and probably other operating systems allows remote attackers to cause a denial of service (connection queue exhaustion) via multiple vectors that manipulate information in the TCP state table, as demonstrated by sockstress.

Affected products

  • Bsd Bsd: affected versions not specified; version 4.1 only; version 4.2 only; version 4.3 only; version 4.4 only
  • Bsdi Bsd OS: affected versions not specified; version 1.1 only; version 2.0 only; version 2.0.1 only; version 2.1 only; version 3.0 only; …
  • Cisco Catalyst Blade Switch 3020 Firmware: before 12.2\(50\) (fixed in 12.2\(50\))
  • Cisco Catalyst Blade Switch 3120 Firmware: before 12.2\(50\) (fixed in 12.2\(50\))
  • Cisco Catalyst Blade Switch 3120x Firmware: before 12.2\(50\) (fixed in 12.2\(50\))
  • Cisco IOS: affected versions not specified; version 4.1 only; version 4.1.1 only; version 4.1.2 only; version 8.2 only; version 8.3 only; …
  • Dragonflybsd Dragonflybsd: affected versions not specified; version 1.0 only; version 1.1 only; version 1.2 only; version 1.10.1 only
  • Freebsd Freebsd: affected versions not specified; version 0.4_1 only; version 1.0 only; version 1.1 only; version 1.1.5 only; version 1.1.5.1 only; …
  • Linux Linux Kernel: affected versions not specified; version 1.2.0 only; version 1.3.0 only; version 2.0 only; version 2.0.1 only; version 2.0.2 only; …
  • Microsoft Windows 2000: affected versions not specified
  • Microsoft Windows Server 2003: affected versions not specified
  • Microsoft Windows Server 2008: affected versions not specified
  • Microsoft Windows Vista: affected versions not specified
  • Microsoft Windows XP: affected versions not specified
  • Midnightbsd Midnightbsd: affected versions not specified
  • Netbsd Netbsd: affected versions not specified; version 1.0 only; version 1.1 only; version 1.2 only; version 1.2.1 only; version 1.3 only; …
  • OpenBSD OpenBSD: affected versions not specified; version 2.0 only; version 2.1 only; version 2.2 only; version 2.3 only; version 2.4 only; …
  • Oracle Solaris: version 8 only; version 9 only; version 10 only
  • Trustedbsd Trustedbsd: affected versions not specified

Published 2008-10-20. Last modified 2026-06-16.