CVE-2026-84198 - Vulnerability Details - OpenCVE

IBM Guardium Data Protection 12.0, 12.1, and 12.2 could allow a remote attacker to execute arbitrary code due to a buffer overflow.

No CVSS v4.0

Attack Vector Network

Attack Complexity High

Privileges Required None

Scope Unchanged

Confidentiality Impact High

Integrity Impact High

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

No EPSS score available.

Key SSVC decision points have not yet been added.

Vendors	Products
Ibm Subscribe	Guardium Data Protection Subscribe

No data.

No data.

No data.

Advisories

No advisories yet.

Fixes

Solution

For all affected versions, IBM strongly recommends addressing these vulnerabilities now by applying the latest IBM Guardium Data Protection Sniffer patch: https://www.ibm.com/support/fixcentral/swg/quickorder?parent=IBM%20Security&product=ibm/Information+Management/InfoSphere+Guardium&release=12.2&platform=All&function=fixId&fixids=SqlGuard_12.0p4018_SnifferUpdate&includeSupersedes=0&source=fc

Workaround

No workaround given by the vendor.

References

Link	Providers
https://www.ibm.com/support/pages/node/7291674

History

Thu, 08 Oct 2026 21:45:00 +0000

Type	Values Removed	Values Added
Description		IBM Guardium Data Protection 12.0, 12.1, and 12.2 could allow a remote attacker to execute arbitrary code due to a buffer overflow.
Title		Multiple vulnerabilities affect the Sniffer component as part of IBM Guardium Data Protection
First Time appeared		Ibm Ibm guardium Data Protection
Weaknesses		CWE-120
CPEs		cpe:2.3:a:ibm:guardium_data_protection:12.0.0:::::::* cpe:2.3:a:ibm:guardium_data_protection:12.0:::::::* cpe:2.3:a:ibm:guardium_data_protection:12.1.0:::::::* cpe:2.3:a:ibm:guardium_data_protection:12.1:::::::* cpe:2.3:a:ibm:guardium_data_protection:12.2.0:::::::* cpe:2.3:a:ibm:guardium_data_protection:12.2:::::::*
Vendors & Products		Ibm Ibm guardium Data Protection
References		https://www.ibm.com/support/pages/node/7291674
Metrics		cvssV3_1 `{'score': 8.1, 'vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H'}`

Projects

Sign in to view the affected projects.

MITRE

Status: PUBLISHED

Assigner: ibm

Published: 2026-10-08T21:28:30.483Z

Updated: 2026-10-08T21:28:30.483Z

Reserved: 2026-09-01T11:03:01.348Z

Link: CVE-2026-84198

Vulnrichment

No data.

NVD

No data.

Redhat

No data.

OpenCVE Enrichment

No data.

Weaknesses

CWE-120

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-84198", "assignerOrgId": "9a959283-ebb5-44b6-b705-dcc2bbced522", "state": "PUBLISHED", "assignerShortName": "ibm", "dateReserved": "2026-09-01T11:03:01.348Z", "datePublished": "2026-10-08T21:28:30.483Z", "dateUpdated": "2026-10-08T21:28:30.483Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "9a959283-ebb5-44b6-b705-dcc2bbced522", "shortName": "ibm", "dateUpdated": "2026-10-08T21:28:30.483Z"}, "title": "Multiple vulnerabilities affect the Sniffer component as part of IBM Guardium Data Protection", "problemTypes": [{"descriptions": [{"lang": "en", "cweId": "CWE-120", "description": "CWE-120 Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')", "type": "CWE"}]}], "affected": [{"vendor": "IBM", "product": "Guardium Data Protection", "versions": [{"status": "affected", "version": "12.0"}, {"status": "affected", "version": "12.1"}, {"status": "affected", "version": "12.2"}], "cpes": ["cpe:2.3:a:ibm:guardium_data_protection:12.0:*:*:*:*:*:*:*", "cpe:2.3:a:ibm:guardium_data_protection:12.0.0:*:*:*:*:*:*:*", "cpe:2.3:a:ibm:guardium_data_protection:12.1:*:*:*:*:*:*:*", "cpe:2.3:a:ibm:guardium_data_protection:12.1.0:*:*:*:*:*:*:*", "cpe:2.3:a:ibm:guardium_data_protection:12.2:*:*:*:*:*:*:*", "cpe:2.3:a:ibm:guardium_data_protection:12.2.0:*:*:*:*:*:*:*"]}], "descriptions": [{"lang": "en", "value": "IBM Guardium Data Protection 12.0, 12.1, and 12.2\u00a0could allow a remote attacker to execute arbitrary code due to a buffer overflow.", "supportingMedia": [{"type": "text/html", "base64": false, "value": "<p>IBM Guardium Data Protection 12.0, 12.1, and 12.2 could allow a remote attacker to execute arbitrary code due to a buffer overflow.</p>"}]}], "references": [{"url": "https://www.ibm.com/support/pages/node/7291674", "tags": ["vendor-advisory", "patch"]}], "metrics": [{"format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}], "cvssV3_1": {"version": "3.1", "attackVector": "NETWORK", "attackComplexity": "HIGH", "privilegesRequired": "NONE", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "availabilityImpact": "HIGH", "baseSeverity": "HIGH", "baseScore": 8.1, "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H"}}], "solutions": [{"lang": "en", "value": "For all affected versions, IBM strongly recommends addressing these vulnerabilities now by applying the latest IBM Guardium Data Protection Sniffer patch:\u00a0\n\n https://www.ibm.com/support/fixcentral/swg/quickorder?parent=IBM%20Security&product=ibm/Information+Management/InfoSphere+Guardium&release=12.2&platform=All&function=fixId&fixids=SqlGuard_12.0p4018_SnifferUpdate&includeSupersedes=0&source=fc", "supportingMedia": [{"type": "text/html", "base64": false, "value": "<div><div><div><div><div><div><div><div><div><div><div><div><div><div><div><div><div><div><div><div><div><div><div><div><div><div></div></div></div></div></div></div></div><div><div>For all affected versions, IBM strongly recommends addressing these vulnerabilities now by applying the latest IBM Guardium Data Protection Sniffer patch:\u00a0</div><div><a href=\"https://www.ibm.com/support/fixcentral/swg/quickorder?parent=IBM%20Security&product=ibm/Information+Management/InfoSphere+Guardium&release=12.2&platform=All&function=fixId&fixids=SqlGuard_12.0p4018_SnifferUpdate&includeSupersedes=0&source=fc\" rel=\"nofollow\">https://www.ibm.com/support/fixcentral/swg/quickorder?parent=IBM%20Security&product=ibm/Information+Management/InfoSphere+Guardium&release=12.2&platform=All&function=fixId&fixids=SqlGuard_12.0p4018_SnifferUpdate&includeSupersedes=0&source=fc</a></div></div></div></div></div></div></div></div></div></div></div></div></div></div></div></div></div></div></div></div></div>"}]}]}}}