Description
IBM Guardium Data Protection 12.0, 12.1, and 12.2 could allow a remote attacker to execute arbitrary code due to a buffer overflow.
Published: 2026-10-08
Score: 7.5 High
EPSS: < 1% Very Low
KEV: No
Impact: Remote Code Execution
Action: Immediate Patch
AI Analysis

Impact

The vulnerability is a buffer overflow in the Sniffer component of IBM Guardium Data Protection. An attacker who can reach the Sniffer service can craft a payload that overflows a memory buffer, allowing arbitrary code execution with the privileges of the Sniffer process. This can lead to full compromise of the host, data exfiltration, or persistence of malicious code.

Affected Systems

The affected product is IBM Guardium Data Protection, specifically the Sniffer component in releases 12.0, 12.1, and 12.2. All versions of the Sniffer in those major releases are vulnerable.

Risk and Exploitability

The CVSS score is 7.5, indicating a high severity. The EPSS score is not available, and the vulnerability is not listed in the CISA KEV catalog. Based on the description, the attack vector is likely remote, requiring network access to the Sniffer service. The vulnerability can be exploited without authentication, making it a significant risk for systems exposed to untrusted networks.

Generated by OpenCVE AI on October 8, 2026 at 22:57 UTC.

Remediation

Vendor Solution

For all affected versions, IBM strongly recommends addressing these vulnerabilities now by applying the latest IBM Guardium Data Protection Sniffer patch:  https://www.ibm.com/support/fixcentral/swg/quickorder?parent=IBM%20Security&product=ibm/Information+Management/InfoSphere+Guardium&release=12.2&platform=All&function=fixId&fixids=SqlGuard_12.0p4018_SnifferUpdate&includeSupersedes=0&source=fc

OpenCVE Recommended Actions

  • Apply the latest IBM Guardium Data Protection Sniffer patch from IBM’s Fix Central.
  • Restrict the Sniffer component to trusted networks by implementing firewall or ACL rules, limiting access to known IP addresses.
  • Continuously monitor system logs for unusual activity related to the Sniffer service and review audit trails for signs of exploitation.

Generated by OpenCVE AI on October 8, 2026 at 22:57 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Thu, 15 Oct 2026 17:15:00 +0000

Type Values Removed Values Added
CPEs cpe:2.3:a:ibm:guardium_data_protection:*:*:*:*:*:*:*:*

Sat, 10 Oct 2026 05:30:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}

Thu, 08 Oct 2026 21:30:00 +0000

Type Values Removed Values Added
Description IBM Guardium Data Protection 12.0, 12.1, and 12.2 could allow a remote attacker to execute arbitrary code due to a buffer overflow.
Title Multiple vulnerabilities affect the Sniffer component as part of IBM Guardium Data Protection
First Time appeared Ibm
Ibm guardium Data Protection
Weaknesses CWE-119
CPEs cpe:2.3:a:ibm:guardium_data_protection:12.0.0:*:*:*:*:*:*:*
cpe:2.3:a:ibm:guardium_data_protection:12.0:*:*:*:*:*:*:*
cpe:2.3:a:ibm:guardium_data_protection:12.1.0:*:*:*:*:*:*:*
cpe:2.3:a:ibm:guardium_data_protection:12.1:*:*:*:*:*:*:*
cpe:2.3:a:ibm:guardium_data_protection:12.2.0:*:*:*:*:*:*:*
cpe:2.3:a:ibm:guardium_data_protection:12.2:*:*:*:*:*:*:*
Vendors & Products Ibm
Ibm guardium Data Protection
References
Metrics cvssV3_1

{'score': 7.5, 'vector': 'CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H'}

Subscriptions

Ibm Guardium Data Protection
cve-icon MITRE

Status: PUBLISHED

Assigner: ibm

Published:

Updated: 2026-10-10T03:55:32.658Z

Reserved: 2026-09-02T14:01:52.303Z

Link: CVE-2026-84875

cve-icon Vulnrichment

Updated: 2026-10-09T14:43:32.198Z

cve-icon NVD

Status : Analyzed

Published: 2026-10-08T22:17:34.430

Modified: 2026-10-15T17:08:03.857

Link: CVE-2026-84875

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-10-08T23:30:12Z

Weaknesses
  • CWE-119

    Improper Restriction of Operations within the Bounds of a Memory Buffer