CVE-2018-1786
Severity Score
7.5
*CVSS v3
Exploit Likelihood
*EPSS
Affected Versions
*CPE
Public Exploits
0
*Multiple Sources
Exploited in Wild
-
*KEV
Decision
-
*SSVC
Descriptions
IBM Spectrum Protect 7.1 and 8.1 dsmc and dsmcad processes incorrectly accumulate TCP/IP sockets in a CLOSE_WAIT state. This can cause TCP/IP resource leakage and may result in a denial of service. IBM X-Force ID: 148871.
Los procesos dsmc y dsmcad de IBM Spectrum Protect 7.1 y 8.1 acumulan incorrectamente sockets TCP/IP en un estado CLOSE_WAIT. Esto puede provocar el filtrado del recurso TCP/IP y podrÃa resultar en una denegación de servicio (DoS). IBM X-Force ID: 148871.
*Credits:
N/A
CVSS Scores
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability
Attack Vector
Attack Complexity
Authentication
Confidentiality
Integrity
Availability
* Common Vulnerability Scoring System
SSVC
- Decision:-
Exploitation
Automatable
Tech. Impact
* Organization's Worst-case Scenario
Timeline
- 2017-12-13 CVE Reserved
- 2018-11-12 CVE Published
- 2024-06-27 EPSS Updated
- 2024-09-17 CVE Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
- CWE-400: Uncontrolled Resource Consumption
CAPEC
References (3)
| URL | Tag | Source |
|---|---|---|
| http://www.securityfocus.com/bid/105940 | Third Party Advisory |
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|---|---|
| http://www.ibm.com/support/docview.wss?uid=ibm10738765 | 2019-10-09 |
| URL | Date | SRC |
|---|---|---|
| https://exchange.xforce.ibmcloud.com/vulnerabilities/148871 | 2019-10-09 |
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Ibm Search vendor "Ibm" | Spectrum Protect Manager For Virtual Environments Data Protection For Vmware Search vendor "Ibm" for product "Spectrum Protect Manager For Virtual Environments Data Protection For Vmware" | >= 8.1.0.0 <= 8.1.6.0 Search vendor "Ibm" for product "Spectrum Protect Manager For Virtual Environments Data Protection For Vmware" and version " >= 8.1.0.0 <= 8.1.6.0" | vmware |
Affected
| in | Linux Search vendor "Linux" | Linux Kernel Search vendor "Linux" for product "Linux Kernel" | - | - |
Safe
|
| Ibm Search vendor "Ibm" | Spectrum Protect Manager For Virtual Environments Data Protection For Vmware Search vendor "Ibm" for product "Spectrum Protect Manager For Virtual Environments Data Protection For Vmware" | >= 8.1.0.0 <= 8.1.6.0 Search vendor "Ibm" for product "Spectrum Protect Manager For Virtual Environments Data Protection For Vmware" and version " >= 8.1.0.0 <= 8.1.6.0" | vmware |
Affected
| in | Microsoft Search vendor "Microsoft" | Windows Search vendor "Microsoft" for product "Windows" | - | - |
Safe
|
| Ibm Search vendor "Ibm" | Tivoli Storage Manager For Virtual Environments Data Protection For Vmware Search vendor "Ibm" for product "Tivoli Storage Manager For Virtual Environments Data Protection For Vmware" | >= 7.1.0 <= 7.1.8.3 Search vendor "Ibm" for product "Tivoli Storage Manager For Virtual Environments Data Protection For Vmware" and version " >= 7.1.0 <= 7.1.8.3" | vmware |
Affected
| in | Linux Search vendor "Linux" | Linux Kernel Search vendor "Linux" for product "Linux Kernel" | - | - |
Safe
|
| Ibm Search vendor "Ibm" | Tivoli Storage Manager For Virtual Environments Data Protection For Vmware Search vendor "Ibm" for product "Tivoli Storage Manager For Virtual Environments Data Protection For Vmware" | >= 7.1.0 <= 7.1.8.3 Search vendor "Ibm" for product "Tivoli Storage Manager For Virtual Environments Data Protection For Vmware" and version " >= 7.1.0 <= 7.1.8.3" | vmware |
Affected
| in | Microsoft Search vendor "Microsoft" | Windows Search vendor "Microsoft" for product "Windows" | - | - |
Safe
|
| Ibm Search vendor "Ibm" | Spectrum Protect For Virtual Environments Data Protection For Hyper-v Search vendor "Ibm" for product "Spectrum Protect For Virtual Environments Data Protection For Hyper-v" | >= 8.1.0.0 <= 8.1.6.0 Search vendor "Ibm" for product "Spectrum Protect For Virtual Environments Data Protection For Hyper-v" and version " >= 8.1.0.0 <= 8.1.6.0" | - |
Affected
| in | Microsoft Search vendor "Microsoft" | Windows Search vendor "Microsoft" for product "Windows" | - | - |
Safe
|
| Ibm Search vendor "Ibm" | Tivoli Storage Manager For Virtual Environments Data Protection For Hyper-v Search vendor "Ibm" for product "Tivoli Storage Manager For Virtual Environments Data Protection For Hyper-v" | >= 7.1.0 <= 7.1.8.0 Search vendor "Ibm" for product "Tivoli Storage Manager For Virtual Environments Data Protection For Hyper-v" and version " >= 7.1.0 <= 7.1.8.0" | - |
Affected
| in | Microsoft Search vendor "Microsoft" | Windows Search vendor "Microsoft" for product "Windows" | - | - |
Safe
|
| Ibm Search vendor "Ibm" | Spectrum Protect Search vendor "Ibm" for product "Spectrum Protect" | >= 8.1.0.0 <= 8.1.6.0 Search vendor "Ibm" for product "Spectrum Protect" and version " >= 8.1.0.0 <= 8.1.6.0" | - |
Affected
| ||||||
| Ibm Search vendor "Ibm" | Tivoli Storage Manager Search vendor "Ibm" for product "Tivoli Storage Manager" | >= 7.1 <= 7.1.8.3 Search vendor "Ibm" for product "Tivoli Storage Manager" and version " >= 7.1 <= 7.1.8.3" | - |
Affected
| ||||||