Threat Level: green Handler on Duty: Guy Bruneau

SANS ISC: Patchlink Issue - SANS Internet Storm Center SANS ISC InfoSec Forums


Sign Up for Free!   Forgot Password?
Log In or Sign Up for Free!
Patchlink Issue

One of our readers has sent us an issue with Patchlink on his Windows servers.

Some of the services on a server stop responding, although it is still be to reach via ping and remote desktop. The server would always have a 5719 error with a "Not enough storage" description. 

After much troubleshooting, he discovered that the issue is caused by the gravitix executable, which is part of the Patchlink client, was consuming ~15,000 TCP handles.

The reader found from the support site that this is indeed an issue (Answer ID 525):
"Agents/computers may go offline after extended periods without PatchLink Update Service being restarted; handle count exceeds 12,000 on gravitixservice.exe."

Unfortunately, the extended period is unclear since the server has been rebooted less than a month ago.

Thanks to our reader for sharing this. If you face similar issue and running Patchlink on your servers, you may want to check this out first. Do drop us a note if this is a real case to you.

Update:

We have been informed that an official fix for this has now been released. QFE agent/client package version 253 will apparently fix this issue.

Koon Yaw

68 Posts

Sign Up for Free or Log In to start participating in the conversation!