CVE:CVE-2018-1786
CNNVD:CNNVD-201811-277
IBM Spectrum Protect（前称Tivoli Storage Manager）是美国IBM公司的一套数据保护平台。该平台为企业提供单一控制和管理点，并支持对所有规模的虚拟、物理和云环境进行备份和恢复。
IBM Spectrum Protect Client中存在资源管理错误漏洞。攻击者可利用该漏洞造成TCP/IP资源泄露，导致拒绝服务。以下产品和版本受到影响：IBM Spectrum Protect Client 8.1.0.0版本至8.1.6.0版本，Tivoli Storage Manager 7.1.8.0版本至7.1.8.3版本，IBM Spectrum Protect for Virtual Environments for Data Protection for Vmware 8.1.0.0版本至8.1.6.0版本，Tivoli Storage Manager for Virtual Environments for Data Protection for VMware 7.1.0.0版本至7.1 8.3版本，IBM Spectrum Protect for Virtual Environments for Data Protection for Hyper-V 8.1.0.0版本至8.1.6.0版本，Tivoli Storage for Virtual Environments for Data Protection for Hyper-V 7.1.0.0版本至7.1.8.0版本。
solution:Upgrade ibm spectrum_protect to a higher version than 8.1.6.0,and avoid the version [8.1.0.0,8.1.6.0]; Upgrade ibm tivoli_storage_manager to a higher version than 7.1.8.3,and avoid the version [7.1,7.1.8.3]; Upgrade ibm spectrum_protect_manager_for_virtual_environments_data_protection_for_vmware to a higher version than 8.1.6.0,and avoid the version [8.1.0.0,8.1.6.0]; Upgrade ibm tivoli_storage_manager_for_virtual_environments_data_protection_for_vmware to a higher version than 7.1.8.3,and avoid the version [7.1.0,7.1.8.3]; Upgrade ibm spectrum_protect_for_virtual_environments_data_protection_for_hyper-v to a higher version than 8.1.6.0,and avoid the version [8.1.0.0,8.1.6.0]; Upgrade ibm tivoli_storage_manager_for_virtual_environments_data_protection_for_hyper-v to a higher version than 7.1.8.0,and avoid the version [7.1.0,7.1.8.0]