Description
IBM Guardium Data Protection 12.0, 12.1, and 12.2 could allow a remote attacker to execute arbitrary code due to a buffer overflow.
Published: 2026-10-08
Score: 8.1 High
EPSS: < 1% Very Low
KEV: No
Impact: Remote Code Execution
Action: Patch Now
AI Analysis

Impact

IBM Guardium Data Protection versions 12.0, 12.1, and 12.2 contain a buffer overflow flaw in the Sniffer component that allows a remote attacker to execute arbitrary code. The overflow can be triggered by crafted input received over the network, leading to executive code execution with the privileges of the Sniffer process.

Affected Systems

IBM Guardium Data Protection, versions 12.0, 12.1 and 12.2. The flaw resides specifically in the Sniffer component of the Guardium Data Protection product.

Risk and Exploitability

The vulnerability has a CVSS score of 8.1 indicating high severity. The EPSS score is not available, and the issue is not currently listed in the CISA KEV catalog. Attacks would likely occur remotely via the network interface used by the Sniffer, with the attack vector inferred from the fact that the vulnerability exploits network‑received input to trigger a buffer overflow.

Generated by OpenCVE AI on October 8, 2026 at 22:55 UTC.

Remediation

Vendor Solution

For all affected versions, IBM strongly recommends addressing these vulnerabilities now by applying the latest IBM Guardium Data Protection Sniffer patch:  https://www.ibm.com/support/fixcentral/swg/quickorder?parent=IBM%20Security&product=ibm/Information+Management/InfoSphere+Guardium&release=12.2&platform=All&function=fixId&fixids=SqlGuard_12.0p4018_SnifferUpdate&includeSupersedes=0&source=fc

OpenCVE Recommended Actions

  • Apply the latest IBM Guardium Data Protection Sniffer patch available at IBM’s Fix Central.
  • Restrict network access to the Sniffer component or disable it if not required.
  • Monitor logs for anomalous activity that could indicate exploitation of the buffer overflow.

Generated by OpenCVE AI on October 8, 2026 at 22:55 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Thu, 15 Oct 2026 00:15:00 +0000

Type Values Removed Values Added
CPEs cpe:2.3:a:ibm:guardium_data_protection:*:*:*:*:*:*:*:*

Sat, 10 Oct 2026 05:30:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}

Thu, 08 Oct 2026 21:45:00 +0000

Type Values Removed Values Added
Description IBM Guardium Data Protection 12.0, 12.1, and 12.2 could allow a remote attacker to execute arbitrary code due to a buffer overflow.
Title Multiple vulnerabilities affect the Sniffer component as part of IBM Guardium Data Protection
First Time appeared Ibm
Ibm guardium Data Protection
Weaknesses CWE-120
CPEs cpe:2.3:a:ibm:guardium_data_protection:12.0.0:*:*:*:*:*:*:*
cpe:2.3:a:ibm:guardium_data_protection:12.0:*:*:*:*:*:*:*
cpe:2.3:a:ibm:guardium_data_protection:12.1.0:*:*:*:*:*:*:*
cpe:2.3:a:ibm:guardium_data_protection:12.1:*:*:*:*:*:*:*
cpe:2.3:a:ibm:guardium_data_protection:12.2.0:*:*:*:*:*:*:*
cpe:2.3:a:ibm:guardium_data_protection:12.2:*:*:*:*:*:*:*
Vendors & Products Ibm
Ibm guardium Data Protection
References
Metrics cvssV3_1

{'score': 8.1, 'vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H'}

Subscriptions

Ibm Guardium Data Protection
cve-icon MITRE

Status: PUBLISHED

Assigner: ibm

Published:

Updated: 2026-10-10T03:55:29.541Z

Reserved: 2026-09-01T11:03:01.348Z

Link: CVE-2026-84198

cve-icon Vulnrichment

Updated: 2026-10-09T14:43:20.851Z

cve-icon NVD

Status : Analyzed

Published: 2026-10-08T22:17:33.457

Modified: 2026-10-15T00:05:28.190

Link: CVE-2026-84198

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-10-08T23:00:15Z

Weaknesses
  • CWE-120

    Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')