CVE-2018-1786

IBM Spectrum Protect 7.1 and 8.1 dsmc and dsmcad processes incorrectly accumulate TCP/IP sockets in a CLOSE_WAIT state. This can cause TCP/IP resource leakage and may result in a denial of service. IBM X-Force ID: 148871.

Published: Nov 12, 2018
Updated: Apr 13, 2023
CVE: CVE-2018-1786
Severity: High
Exploit:

CVSS v3:

Severity: High
Score: 7.5
AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CVSS v2:

Severity: Medium
Score: 5
AV:N/AC:L/Au:N/C:N/I:N/A:P

CWEs:

CWE-400

Affected Software
References

Software	From	Fixed in
ibm / tivoli_storage_manager	7.1	7.1.8.3.x
ibm / spectrum_protect	8.1.0.0	8.1.6.0.x
ibm / spectrum_protect_manager_for_virtual_environments_data_protection_for_vmware	8.1.0.0	8.1.6.0.x
ibm / tivoli_storage_manager_for_virtual_environments_data_protection_for_vmware	7.1.0	7.1.8.3.x
ibm / spectrum_protect_for_virtual_environments_data_protection_for_hyper-v	8.1.0.0	8.1.6.0.x
ibm / tivoli_storage_manager_for_virtual_environments_data_protection_for_hyper-v	7.1.0	7.1.8.0.x

http://www.ibm.com/support/docview.wss?uid=ibm10738765
http://www.securityfocus.com/bid/105940
https://exchange.xforce.ibmcloud.com/vulnerabilities/148871

Vulnerability Database

CVE-2018-1786