Description


IBM Guardium Data Protection 12.0, 12.1 is vulnerable to a heap-based buffer overflow in the S-TAP TrafficTap TDS login reassembly functionality. An unauthenticated remote attacker can send crafted TDS login fragments that exceed the fixed-size reassembly buffer, potentially resulting in denial of service or arbitrary code execution on the affected system.

Related CPE's


a

ibm

guardium_data_protection

2

Weaknesses



CWE-119


CWE-787

CVSS impact metrics


CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

8.1 · High

Information


Source identifier

[email protected]

Vulnerability status

Analyzed

Published

2026-10-08T20:17:37.020Z

20 hours ago

Last modified

2026-10-09T15:17:16.183Z

1 hour ago