Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
ubuntucveUbuntu.comUB:CVE-2008-4609
HistoryOct 20, 2008 - 12:00 a.m.

CVE-2008-4609

2008-10-2000:00:00
ubuntu.com
ubuntu.com
26

7.1 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:N/I:N/A:C

0.045 Low

EPSS

Percentile

92.5%

JSON

The TCP implementation in (1) Linux, (2) platforms based on BSD Unix, (3)
Microsoft Windows, (4) Cisco products, and probably other operating systems
allows remote attackers to cause a denial of service (connection queue
exhaustion) via multiple vectors that manipulate information in the TCP
state table, as demonstrated by sockstress.

Notes

Author Note
kees negligible priority because there is no actual information yet.

Related

prion 2
cbl_mariner 2
checkpoint_security 1
seebug 1
securityvulns 5
f5 1
nessus 4
debiancve 1
cisco 1
cve 2
cert 1
checkpoint_advisories 1
openvas 2
oracle 1
avleonov 1
prion
prion
Design/Logic Flaw
2008-10-20 17:59:00
Code injection
2009-09-08 23:30:00
cbl_mariner
cbl_mariner
CVE-2008-4609 affecting package kernel for versions less than 5.10.78.1-1
2022-04-09 06:52:47
CVE-2008-4609 affecting package kernel 5.10.111.1-1
2021-09-09 15:03:26
checkpoint_security
checkpoint_security
Check Point response to Sockstress TCP DoS attacks (CVE-2008-4609)
2009-09-05 21:00:00
seebug
seebug
Windows 2000 TCP/IP窗口大小拒绝服务漏洞(MS09-048)
2009-09-11 00:00:00
securityvulns
securityvulns
[security bulletin] HPSBMI02473 SSRT080138 rev.1 - Cisco Catalyst Blade Switch 3020/3120, Remote Denial of Service (DoS)
2009-11-18 00:00:00
Cisco Security Advisory: TCP State Manipulation Denial of Service Vulnerabilities in Multiple Cisco Products
2009-09-09 00:00:00
Microsoft Security Bulletin MS09-048 - Critical Vulnerabilities in Windows TCP/IP Could Allow Remote Code Execution (967723)
2009-09-09 00:00:00
f5
f5
SOL10509 - Sockstress DoS tool vulnerability CVE-2008-4609
2009-09-07 00:00:00
nessus
nessus
F5 Networks BIG-IP : Sockstress DoS tool vulnerability (SOL10509)
2014-10-10 00:00:00
TCP State Manipulation Denial of Service Vulnerabilities in Multiple Cisco Products - Cisco Systems
2010-09-01 00:00:00
MS09-048: Vulnerabilities in Windows TCP/IP Could Allow Remote Code Execution (967723)
2009-09-08 00:00:00
debiancve
debiancve
CVE-2008-4609
2008-10-20 17:59:00
cisco
cisco
TCP State Manipulation Denial of Service Vulnerabilities in Multiple Cisco Products
2009-09-08 00:00:00
cve
cve
CVE-2008-4609
2008-10-20 17:59:00
CVE-2009-0627
2009-09-08 23:30:00
cert
cert
TCP may keep its offered receive window closed indefinitely (RFC 1122)
2009-11-23 00:00:00
checkpoint_advisories
checkpoint_advisories
TCP Window Size Enforcement (CVE-2008-4609; CVE-2009-1925; CVE-2009-1926)
2009-09-08 00:00:00
openvas
openvas
Microsoft Windows TCP/IP Remote Code Execution Vulnerability (967723)
2009-09-10 00:00:00
Microsoft Windows TCP/IP Remote Code Execution Vulnerability (967723)
2009-09-10 00:00:00
oracle
oracle
Oracle Critical Patch Update - July 2012
2012-07-17 00:00:00
avleonov
avleonov
Scanvus now supports Vulners and Vulns.io VM Linux vulnerability detection APIs
2022-12-30 18:03:13

7.1 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:N/I:N/A:C

0.045 Low

EPSS

Percentile

92.5%

JSON
Related for UB:CVE-2008-4609
prion2cbl_mariner2checkpoint_security1seebug1securityvulns5f51nessus4debiancve1cisco1cve2cert1checkpoint_advisories1openvas2oracle1avleonov1