The TCP implementation in (1) Linux, (2) platforms based on BSD Unix, (3) Microsoft Windows, (4) Cisco products, and probably other operating systems allows remote attackers to cause a denial of service (connection queue exhaustion) via multiple vectors that manipulate information in the TCP state table, as demonstrated by sockstress.
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-048
http://www.us-cert.gov/cas/techalerts/TA09-251A.html
http://www.oracle.com/technetwork/topics/security/cpujul2012-392727.html