CVE-2018-1786 Denial of service in Spectrum Protect

What is CVE-2018-1786?

CVE-2018-1786 is a medium-severity denial of service vulnerability in IBM Spectrum Protect, published on 12 Nov 2018. An attacker can exploit it over the internet without logging in, with no action from the victim.

Official description

IBM Spectrum Protect 7.1 and 8.1 dsmc and dsmcad processes incorrectly accumulate TCP/IP sockets in a CLOSE_WAIT state. This can cause TCP/IP resource leakage and may result in a denial of service. IBM X-Force ID: 148871.

Weakness: CWE-400

Which versions are affected by CVE-2018-1786?

It affects 6 products.

Products include Ibm Spectrum Protect, Ibm Spectrum Protect for Virtual Environments Data Protection for Hyper-V, Ibm Spectrum Protect Manager for Virtual Environments Data Protection for Vmware, Ibm Tivoli Storage Manager, Ibm Tivoli Storage Manager for Virtual Environments Data Protection for Hyper-V, Ibm Tivoli Storage Manager for Virtual Environments Data Protection for Vmware.

How do I fix CVE-2018-1786?

No fix has been published for CVE-2018-1786 yet. Limit exposure of the affected software until one is available.

Upgrade, then put limits on request size, rate and nesting depth so one client cannot exhaust the service. More about Denial of service.

Is CVE-2018-1786 being exploited?

There is no known exploitation of CVE-2018-1786 in the wild and no public exploit code.

Other vulnerabilities in IBM Spectrum Protect

• CVE-2020-4415 Memory corruption in Spectrum Protect Critical 9.8
• CVE-2020-4210 Command injection in Spectrum Protect Plus Critical 9.8
• CVE-2020-4211 Command injection in Spectrum Protect Plus Critical 9.8
• CVE-2020-4212 Command injection in Spectrum Protect Plus Critical 9.8
• CVE-2020-4213 Command injection in Spectrum Protect Plus Critical 9.8

Sources

• CVE record
• NVD
• OSV
• GitHub advisory
• How this page is made

Also known as GHSA-63h3-p626-m48h.