CVE-2018-1786: IBM Spectrum Protect 7.1 and 8.1 dsmc and dsmcad processes incorrectly accumulate TCP/IP sockets in a CLOSE...

Security readout for executives and security teams

IBM Spectrum Protect 7.1 and 8.1 can leak TCP/IP socket resources in the dsmc and dsmcad processes by leaving sockets in CLOSE_WAIT. Over time, this may reduce availability and cause denial of service for backup-related operations. The issue is medium severity because it affects availability, not data confidentiality or integrity. Exposure is limited to environments running IBM Spectrum Protect 7.1 or 8.1 with dsmc or dsmcad processes in use. Network reachability is part of the CVSS vector, but the provided sources do not establish internet exposure or affected configurations beyond those versions. Schedule remediation in the normal vulnerability cycle, faster for critical backup infrastructure. The main business concern is backup service disruption, which can affect recovery readiness. There is no sourced evidence of active exploitation in the provided material. Mitigation focus: Review IBM's official advisory for the applicable fix or upgrade path.; Prioritize remediation on active Spectrum Protect 7.1 and 8.1 systems.; Restrict network access to Spectrum Protect services to trusted hosts..

Prepared

Jun 1, 2026, 04:16 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.