Newsletter Archives
-
MS17-006 (KB4012216, KB4012215, KB1042204) and Servers dropping off of the network
Intriguing observation from PB:
We had some of our Windows 2008, Windows 2008 R2 and Windows 2012 R2 servers “drop off the network” today. In most of the cases, we noted that ICMP requests to the server were ignored. Using WireShark I did confirm that the traffic was received by the server but no reply was ever sent. The server could ping any device on the network, but would not answer any request sent to it. In most of the cases application protocols (At least http and https) would stop working as well (though there were a couple of instances where it seemed to work selectively).
Our troubleshooting led us to the patches released under MS17-006 (Specifically KB4012216, KB4012215, and KB1042204). Removing these returned the server to normal operation. Curiously, the patches were installed on some of the servers as long as two weeks ago and the behavior didn’t start until last night.
I have only found one article online indicating anyone has had this or similar issues. I have been reading your articles on infoworld.com lately. So, I figured you might have some knowledge of how common this issue might be. If it isn’t common (or common yet), I thought it might benefit you to hear about our experience.
Have you hit something similar?