IBM Guardium Data Protection 12.0, 12.1, and 12.2 is vulnerable to a buffer overrun in the TDS (Microsoft SQL Server) PRELOGIN packet decoder. (CVE-2026-84058)

CVE-2026-84058 is a buffer overrun vulnerability in the TDS PRELOGIN packet decoder component of IBM Guardium Data Protection versions 12.0, 12.1, and 12.2. An unauthenticated remote attacker capable of sending crafted TDS PRELOGIN packets to a monitored network can exploit this flaw to cause denial of service or potentially execute arbitrary code on the Collector appliance. The vulnerability is classified under CWE-119 (Improper Restriction of Operations within the Bounds of a Memory Buffer) and has a CVSS v3.1 base score of 8.1, indicating high impact on confidentiality, integrity, and availability.

Successful exploitation may lead to denial of service or arbitrary code execution on the IBM Guardium Collector appliance, compromising the confidentiality, integrity, and availability of the system. This could allow an attacker to disrupt monitoring operations or gain control over the appliance.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. No official fix or patch links are provided in the available information. Until a patch is available, restrict network access to the IBM Guardium Collector appliance to trusted sources and monitor for unusual TDS PRELOGIN packet activity.