Buffer Overrun in IBM Guardium Data Protection

Publication date: 2026-10-08

Last updated on: 2026-10-08

Assigner: IBM Corporation

Description

IBM Guardium Data Protection 12.0, 12.1, and 12.2 is vulnerable to a buffer overrun in the TDS (Microsoft SQL Server) PRELOGIN packet decoder. A remote attacker who can send a specially crafted TDS PRELOGIN packet to a network monitored by an IBM Guardium Collector may cause a denial of service or potentially execute arbitrary code on the Collector appliance.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-10-08

Last Modified

2026-10-08

Generated

2026-10-09

AI Q&A

2026-10-09

EPSS Evaluated

N/A

NVD

CVE-2026-84058

Affected Vendors & Products

Vendor	Product	Version / Range
IBM	Guardium	Data Protection 12.0
IBM	Guardium	Data Protection 12.1
IBM	Guardium	Data Protection 12.2

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-119	The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

Attack-Flow Graph

Executive Summary

IBM Guardium Data Protection versions 12.0, 12.1, and 12.2 have a buffer overrun vulnerability in the TDS (Microsoft SQL Server) PRELOGIN packet decoder. This flaw allows a remote attacker to send a specially crafted packet to a monitored network, potentially causing a denial of service or executing arbitrary code on the Guardium Collector appliance.

Impact Analysis

This vulnerability could allow attackers to disrupt services by causing a denial of service or gain unauthorized access to execute malicious code on the Guardium Collector appliance, compromising data monitoring and security.

Mitigation Strategies

Apply the latest IBM Guardium Data Protection patches or updates to address the buffer overrun in the TDS PRELOGIN packet decoder. Isolate or restrict network access to the Guardium Collector appliance to limit exposure to crafted TDS PRELOGIN packets.

Hi! I’m here to help you understand CVE-2026-84058. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70