VulnerabilityModified

CVE-2008-4609

The TCP implementation in (1) Linux, (2) platforms based on BSD Unix, (3) Microsoft Windows, (4) Cisco products, and probably other operating systems allows remote attackers to cause a denial of service (connection queue exhaustion) via multiple vectors…

HIGH 7.1EPSS 32.1%

Does this matter?

EPSS puts the probability of exploitation in the next 30 days at 32.1%, higher than 98% of all known CVEs. Patch or mitigate before the next change window.

Description

CVSS 2.0: 7.1 HIGHAV:N/AC:M/Au:N/C:N/I:N/A:C
EPSS: 32.12% probability · 98th percentile
CISA KEV: Not listed
Weakness: CWE-16
Affected: bsd/bsd · bsdi/bsd os · cisco/ios · dragonflybsd/dragonflybsd · freebsd/freebsd · linux/linux kernel · midnightbsd/midnightbsd · netbsd/netbsd · openbsd/openbsd · trustedbsd/trustedbsd · microsoft/windows 2000 · microsoft/windows server 2003 · microsoft/windows server 2008 · microsoft/windows vista · microsoft/windows xp · cisco/catalyst blade switch 3020 firmware · cisco/catalyst blade switch 3120 firmware · cisco/catalyst blade switch 3120x firmware · oracle/solaris
Source: cve@mitre.org

References

http://blog.robertlee.name/2008/10/conjecture-speculation.htmlBroken Link
http://insecure.org/stf/tcp-dos-attack-explained.htmlBroken Link
http://lists.immunitysec.com/pipermail/dailydave/2008-October/005360.htmlBroken Link
http://marc.info/?l=bugtraq&m=125856010926699&w=2Third Party Advisory
http://searchsecurity.techtarget.com.au/articles/27154-TCP-is-fundamentally-borkedBroken Link
http://www.cisco.com/en/US/products/products_security_advisory09186a0080af511d.shtmlBroken Link
http://www.cisco.com/en/US/products/products_security_response09186a0080a15120.htmlBroken Link
http://www.cpni.gov.uk/Docs/tn-03-09-security-assessment-TCP.pdfBroken Link
http://www.mandriva.com/security/advisories?name=MDVSA-2013:150Broken Link
http://www.oracle.com/technetwork/topics/security/cpujul2012-392727.htmlThird Party Advisory
http://www.outpost24.com/news/news-2008-10-02.htmlBroken Link
http://www.us-cert.gov/cas/techalerts/TA09-251A.htmlThird Party Advisory, US Government Resource
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-048Patch, Third Party Advisory
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6340Broken Link
https://www.cert.fi/haavoittuvuudet/2008/tcp-vulnerabilities.htmlBroken Link
http://blog.robertlee.name/2008/10/conjecture-speculation.htmlBroken Link
http://insecure.org/stf/tcp-dos-attack-explained.htmlBroken Link
http://lists.immunitysec.com/pipermail/dailydave/2008-October/005360.htmlBroken Link
http://marc.info/?l=bugtraq&m=125856010926699&w=2Third Party Advisory
http://searchsecurity.techtarget.com.au/articles/27154-TCP-is-fundamentally-borkedBroken Link
http://www.cisco.com/en/US/products/products_security_advisory09186a0080af511d.shtmlBroken Link
http://www.cisco.com/en/US/products/products_security_response09186a0080a15120.htmlBroken Link
http://www.cpni.gov.uk/Docs/tn-03-09-security-assessment-TCP.pdfBroken Link
http://www.mandriva.com/security/advisories?name=MDVSA-2013:150Broken Link
http://www.oracle.com/technetwork/topics/security/cpujul2012-392727.htmlThird Party Advisory
http://www.outpost24.com/news/news-2008-10-02.htmlBroken Link
http://www.us-cert.gov/cas/techalerts/TA09-251A.htmlThird Party Advisory, US Government Resource
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-048Patch, Third Party Advisory
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6340Broken Link
https://www.cert.fi/haavoittuvuudet/2008/tcp-vulnerabilities.htmlBroken Link

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.