What’s Vulnerable › Vulnerabilities

CVE-2018-1786

• Severity: high (CVSS 7.5 v3.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 2.4% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2018-11-12 · updated 2026-06-17
• Weakness: CWE-400

Description

IBM Spectrum Protect 7.1 and 8.1 dsmc and dsmcad processes incorrectly accumulate TCP/IP sockets in a CLOSE_WAIT state. This can cause TCP/IP resource leakage and may result in a denial of service. IBM X-Force ID: 148871.

Affected products

• IBM Spectrum Protect: from 8.1.0.0 through 8.1.6.0
• IBM Spectrum Protect For Virtual Environments Data Protection For Hyper-V: from 8.1.0.0 through 8.1.6.0
• IBM Spectrum Protect Manager For Virtual Environments Data Protection For Vmware: from 8.1.0.0 through 8.1.6.0
• IBM Corporation Tivoli Storage Manager: from 7.1 through 7.1.8.3
• IBM Tivoli Storage Manager For Virtual Environments Data Protection For Hyper-V: from 7.1.0 through 7.1.8.0
• IBM Corporation Tivoli Storage Manager for Virtual Environments: from 7.1.0 through 7.1.8.3

References

• http://www.ibm.com/support/docview.wss?uid=ibm10738765
• http://www.securityfocus.com/bid/105940
• https://exchange.xforce.ibmcloud.com/vulnerabilities/148871
• http://www.ibm.com/support/docview.wss?uid=ibm10738765
• http://www.securityfocus.com/bid/105940
• https://exchange.xforce.ibmcloud.com/vulnerabilities/148871

Get alerted when CVE-2018-1786 or the next vulnerability affects your stack