CVE-2026-84058 — Multiple vulnerabilities affect the Sniffer component as part of IBM Guardium Data Protection

CVE-2026-84058

Multiple vulnerabilities affect the Sniffer component as part of IBM Guardium Data Protection PUBLISHED

Description (CNA)

IBM Guardium Data Protection 12.0, 12.1, and 12.2 is vulnerable to a buffer overrun in the TDS (Microsoft SQL Server) PRELOGIN packet decoder. A remote attacker who can send a specially crafted TDS PRELOGIN packet to a network monitored by an IBM Guardium Collector may cause a denial of service or potentially execute arbitrary code on the Collector appliance.

Affected (CNA)

Vendor / product	Versions
IBM / Guardium Data Protection	affected 12.0; affected 12.1; affected 12.2

CWE

CWE-119

References

https://www.ibm.com/support/pages/node/7291674

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.