CVE-2018-1786: IBM Spectrum Protect 7.1 and 8.1 dsmc and dsmcad processes incorrectly accumulate TCP/IP sockets in a CLOSE_WAIT state. This can cause TCP/IP resource leakage…

PriorityP335high7.5CVSS 3.0

AVNACLPRNUINSUCNINAH

EPSS

2.43%

82.4th percentile

IBM Spectrum Protect 7.1 and 8.1 dsmc and dsmcad processes incorrectly accumulate TCP/IP sockets in a CLOSE_WAIT state. This can cause TCP/IP resource leakage and may result in a denial of service. IBM X-Force ID: 148871.

Affected

8 ranges

Vendor	Product	Version range	Fixed in
ibm	spectrum_protect	—	—
ibm	spectrum_protect	—	—
ibm	spectrum_protect	8.1.0.0 – 8.1.6.0	—
ibm	spectrum_protect_for_virtual_environments_data_protection_for_hyper-v	8.1.0.0 – 8.1.6.0	—
ibm	spectrum_protect_manager_for_virtual_environments_data_protection_for_vmware	8.1.0.0 – 8.1.6.0	—
ibm	tivoli_storage_manager	7.1 – 7.1.8.3	—
ibm	tivoli_storage_manager_for_virtual_environments_data_protection_for_hyper-v	7.1.0 – 7.1.8.0	—
ibm	tivoli_storage_manager_for_virtual_environments_data_protection_for_vmware	7.1.0 – 7.1.8.3	—

CVSS provenance

nvdv3.07.5HIGHCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

nvdv2.05.0MEDIUMAV:N/AC:L/Au:N/C:N/I:N/A:P

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.