Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
7.1

Linux, BSD, Windows, Cisco IOS can be crashed

CVE-2008-4609 · published 18 years ago
Summary

The TCP networking code in Linux, BSD‑based systems, Windows and Cisco IOS can be overwhelmed by specially crafted traffic, causing the machines to stop accepting new connections. This makes the affected servers unavailable to legitimate users. Apply the latest operating system and firmware updates to fix the issue.

What to do
  • Update debian rootio-linux to version 6.1.159-1.root.io.75.
  • Update debian rootio-linux to version 6.12.73-1.root.io.91.
  • Update debian rootio-linux to version 5.10.247-1.root.io.42.
  • Update debian rootio-linux to version 6.12.74-2.root.io.98.
  • Update debian rootio-linux to version 6.12.74-2.root.io.114.
  • Update debian rootio-linux to version 6.12.94-1.root.io.146.
  • Update linux to version 6.12.113-1.aikido.163.
  • Update rootio-linux to version 6.12.113-1.aikido.163.
  • Update linux to version 6.1.190-1.aikido.167.
  • Update rootio-linux to version 6.1.190-1.aikido.167.
  • Update cisco catalyst_blade_switch_3020_firmware to version 12.2\(50\) or later.
  • Update cisco catalyst_blade_switch_3120_firmware to version 12.2\(50\) or later.
  • Update cisco catalyst_blade_switch_3120x_firmware to version 12.2\(50\) or later.
Affected software
Ecosystem VendorProductAffected versions
Root:Debian:12 debian rootio-linux < 6.1.159-1.root.io.75
Fix: upgrade to 6.1.159-1.root.io.75
Debian:12 debian linux All versions
Debian:13 debian linux All versions
Debian:14 debian linux All versions
Root:Debian:13 debian rootio-linux < 6.12.73-1.root.io.91
< 6.12.74-2.root.io.98
< 6.12.74-2.root.io.114
< 6.12.94-1.root.io.146
Fix: upgrade to 6.12.73-1.root.io.91
Root:Debian:11 debian rootio-linux < 5.10.247-1.root.io.42
Fix: upgrade to 5.10.247-1.root.io.42
– bsd bsd 4.1
4.2
4.3
4.4
cpe:2.3:o:bsd:bsd:-:*:*:*:*:*:*:*
– bsdi bsd_os 1.1
2.0
2.0.1
2.1
3.0
3.1
3.2
4.0
4.0.1
4.1
4.2
cpe:2.3:o:bsdi:bsd_os:-:*:*:*:*:*:*:*
– cisco ios 4.1
4.1.1
4.1.2
8.2
8.3
9.0
9.1
9.14
10.0
10.3
10.3\(3.3\)
10.3\(3.4\)
1444 more version ranges
cpe:2.3:o:cisco:ios:-:*:*:*:*:*:*:*
– dragonflybsd dragonflybsd 1.0
1.1
1.2
1.10.1
cpe:2.3:o:dragonflybsd:dragonflybsd:-:*:*:*:*:*:*:*
– freebsd freebsd 0.4_1
1.0
1.1
1.1.5
1.1.5.1
1.2
1.5
2.0
2.0.1
2.0.5
2.1
2.1.0
48 more version ranges
cpe:2.3:o:freebsd:freebsd:-:*:*:*:*:*:*:*
– linux linux_kernel 1.2.0
1.3.0
2.0
2.0.1
2.0.2
2.0.3
2.0.4
2.0.5
2.0.6
2.0.7
2.0.8
2.0.9
409 more version ranges
cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*
– midnightbsd midnightbsd All versions
cpe:2.3:o:midnightbsd:midnightbsd:-:*:*:*:*:*:*:*
– netbsd netbsd 1.0
1.1
1.2
1.2.1
1.3
1.3.1
1.3.2
1.3.3
1.4
1.4.1
1.4.2
1.4.3
20 more version ranges
cpe:2.3:o:netbsd:netbsd:-:*:*:*:*:*:*:*
– openbsd openbsd 2.0
2.1
2.2
2.3
2.4
2.5
2.6
2.7
2.8
2.9
3.0
3.1
12 more version ranges
cpe:2.3:o:openbsd:openbsd:-:*:*:*:*:*:*:*
– trustedbsd trustedbsd All versions
cpe:2.3:o:trustedbsd:trustedbsd:-:*:*:*:*:*:*:*
– microsoft windows_2000 All versions
cpe:2.3:o:microsoft:windows_2000:-:sp4:*:*:*:*:*:*
– microsoft windows_server_2003 All versions
cpe:2.3:o:microsoft:windows_server_2003:-:sp2:*:*:*:*:*:*
– microsoft windows_server_2008 All versions
cpe:2.3:o:microsoft:windows_server_2008:-:sp1:*:*:*:*:*:*
– microsoft windows_vista All versions
cpe:2.3:o:microsoft:windows_vista:-:sp1:*:*:*:*:*:*
– microsoft windows_xp All versions
cpe:2.3:o:microsoft:windows_xp:-:sp2:*:*:*:*:*:*
– cisco catalyst_blade_switch_3020_firmware < 12.2\(50\)
cpe:2.3:o:cisco:catalyst_blade_switch_3020_firmware:*:*:*:*:*:*:*:*
– cisco catalyst_blade_switch_3120_firmware < 12.2\(50\)
cpe:2.3:o:cisco:catalyst_blade_switch_3120_firmware:*:*:*:*:*:*:*:*
– cisco catalyst_blade_switch_3120x_firmware < 12.2\(50\)
cpe:2.3:o:cisco:catalyst_blade_switch_3120x_firmware:*:*:*:*:*:*:*:*
– oracle solaris 8
9
10
cpe:2.3:o:oracle:solaris:8:*:*:*:*:*:*:*
Root:Debian:13 – linux < 6.12.113-1.aikido.163
Fix: upgrade to 6.12.113-1.aikido.163
Root:Debian:13 – rootio-linux < 6.12.113-1.aikido.163
Fix: upgrade to 6.12.113-1.aikido.163
Root:Debian:12 – linux < 6.1.190-1.aikido.167
Fix: upgrade to 6.1.190-1.aikido.167
Root:Debian:12 – rootio-linux < 6.1.190-1.aikido.167
Fix: upgrade to 6.1.190-1.aikido.167
Original advisory text
CVE-2008-4609 in linux - Patched by Root
The TCP implementation in (1) Linux, (2) platforms based on BSD Unix, (3) Microsoft Windows, (4) Cisco products, and probably other operating systems allows remote attackers to cause a denial of service (connection queue exhaustion) via multiple vectors that manipulate information in the TCP state table, as demonstrated by sockstress.
References
Severity
7.1 High
Exploitation
32% chance of attack within 30 days
Type
CWE-16Configuration
Timeline
Published20 Oct 2008
Updated2 Nov 2026
First seen6 Mar 2026
Sources
ROOT-OS-DEBIAN-12-CVE-2008-4609 · OSV
ROOT-OS-DEBIAN-13-CVE-2008-4609 · OSV
ROOT-OS-DEBIAN-11-CVE-2008-4609 · OSV
CVE-2008-4609 · NVD
DEBIAN-CVE-2008-4609 · OSV
Track software like this
Free during beta