CVE-2018-1786

IBM Spectrum Protect 7.1 and 8.1 dsmc and dsmcad processes incorrectly accumulate TCP/IP sockets in a CLOSE_WAIT state. This can cause TCP/IP resource leakage and may result in a denial of service. IBM X-Force ID: 148871.
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:ibm:spectrum_protect:*:*:*:*:*:*:*:*
cpe:2.3:a:ibm:tivoli_storage_manager:*:*:*:*:*:*:*:*

Configuration 2 (hide)

AND
OR cpe:2.3:a:ibm:spectrum_protect_manager_for_virtual_environments_data_protection_for_vmware:*:*:*:*:*:vmware:*:*
cpe:2.3:a:ibm:tivoli_storage_manager_for_virtual_environments_data_protection_for_vmware:*:*:*:*:*:vmware:*:*
OR cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*

Configuration 3 (hide)

AND
OR cpe:2.3:a:ibm:spectrum_protect_for_virtual_environments_data_protection_for_hyper-v:*:*:*:*:*:*:*:*
cpe:2.3:a:ibm:tivoli_storage_manager_for_virtual_environments_data_protection_for_hyper-v:*:*:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*

History

21 Nov 2024, 04:00

Type Values Removed Values Added
References () http://www.ibm.com/support/docview.wss?uid=ibm10738765 - Patch, Vendor Advisory () http://www.ibm.com/support/docview.wss?uid=ibm10738765 - Patch, Vendor Advisory
References () http://www.securityfocus.com/bid/105940 - Third Party Advisory, VDB Entry () http://www.securityfocus.com/bid/105940 - Third Party Advisory, VDB Entry
References () https://exchange.xforce.ibmcloud.com/vulnerabilities/148871 - VDB Entry, Vendor Advisory () https://exchange.xforce.ibmcloud.com/vulnerabilities/148871 - VDB Entry, Vendor Advisory
CVSS v2 : 5.0
v3 : 7.5
v2 : 5.0
v3 : 5.3

Information

Published : 2018-11-12 16:29

Updated : 2024-11-21 04:00


NVD link : CVE-2018-1786

Mitre link : CVE-2018-1786

CVE.ORG link : CVE-2018-1786


JSON object : View

Products Affected

ibm

  • spectrum_protect_for_virtual_environments_data_protection_for_hyper-v
  • tivoli_storage_manager
  • tivoli_storage_manager_for_virtual_environments_data_protection_for_hyper-v
  • spectrum_protect_manager_for_virtual_environments_data_protection_for_vmware
  • tivoli_storage_manager_for_virtual_environments_data_protection_for_vmware
  • spectrum_protect

linux

  • linux_kernel

microsoft

  • windows
CWE
CWE-400

Uncontrolled Resource Consumption