CVE-2026-84058

Analyzed Analyzed - Analysis Complete

BaseFortify

Publication date: 2026-10-08

Last updated on: 2026-10-14

Assigner: IBM Corporation

Description

IBM Guardium Data Protection 12.0, 12.1, and 12.2 is vulnerable to a buffer overrun in the TDS (Microsoft SQL Server) PRELOGIN packet decoder. A remote attacker who can send a specially crafted TDS PRELOGIN packet to a network monitored by an IBM Guardium Collector may cause a denial of service or potentially execute arbitrary code on the Collector appliance.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-10-08

Last Modified

2026-10-14

Generated

2026-10-19

AI Q&A

2026-10-09

EPSS Evaluated

2026-10-18

NVD

CVE-2026-84058

EUVD

EUVD-2026-95330

Affected Vendors & Products

Vendor	Product	Version / Range
ibm	guardium_data_protection	From 12.0 (inc) to 12.2 (inc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-119	The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

Attack-Flow Graph

Executive Summary

IBM Guardium Data Protection versions 12.0, 12.1, and 12.2 have a buffer overrun vulnerability in the TDS (Microsoft SQL Server) PRELOGIN packet decoder. This flaw allows a remote attacker to send a specially crafted packet to a monitored network, potentially causing a denial of service or executing arbitrary code on the Guardium Collector appliance.

Detection Guidance

This vulnerability involves a buffer overrun in IBM Guardium Data Protection's TDS PRELOGIN packet decoder. Detection requires monitoring network traffic for malformed TDS PRELOGIN packets targeting Guardium Collector appliances. Use network traffic analysis tools like Wireshark to inspect TDS protocol packets for anomalies. Check Guardium appliance logs for crashes or unusual activity. Ensure your Guardium Collector is updated to the latest version to mitigate risks.

Impact Analysis

This vulnerability could allow attackers to disrupt services by causing a denial of service or gain unauthorized access to execute malicious code on the Guardium Collector appliance, compromising data monitoring and security.

Compliance Impact

This vulnerability could potentially impact compliance with GDPR and HIPAA by allowing unauthorized access or data breaches through remote code execution or denial of service on the IBM Guardium Collector appliance. Such incidents may lead to unauthorized data exposure or processing disruptions, violating regulatory requirements for data protection and availability.

Mitigation Strategies

Apply the latest IBM Guardium Data Protection patches or updates to address the buffer overrun in the TDS PRELOGIN packet decoder. Isolate or restrict network access to the Guardium Collector appliance to limit exposure to crafted TDS PRELOGIN packets.

Hi! I’m here to help you understand CVE-2026-84058. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70