Roll-up update KB 2775511. Report of data truncation when utilized with SMB 2.0 connections for multiple data read and writes to network share (New update has released KB 2732673)

UPDATE: The update for the issue documented here has released as of 8/13/2013. The update is available under KB article 2732673:    https://support.microsoft.com/kb/2732673

 

For those who have installed the prior 2775511 update already, the update released under KB 2732673 should be installed after the 2775511 update.

 

=========================================================================================

 

Hi,

 

Writing today to provide a support update to the community on an issue that we are seeing in developer support on an optional Windows update. Specifically, we have a report were data is being truncated from an application utilizing network shares from a client Windows 7 that making requests for data storage to a Windows Vista, Windows 7, Windows Server 2008/2008 R2, or Windows 2012 machine.

 

The report is that data truncation issue occurs only after installation of optional update under KB 2775511 on Windows 7 SP1 client machines. To date, this is the report that we have on the issue. We are working closely with the reporting customer to resolve the report with progress being provided by the customer here:

     https://support.esri.com/en/knowledgebase/techarticles/detail/41119

 

In addition, we have reports that the following additional two updates can cause the data truncation issue under the same scenario:

    https://support.microsoft.com/kb/2732673

    https://support.microsoft.com/kb/2824408

 

The specific component has been identified to be in the RDBSS.SYS component. The updated RDBSS.SYS component has to be on the client machine only for the issue reported. In addition, the remote machine has to be able to support SMB 2.0 communication in order for the issue to surface.

 

For more background on these Microsoft updates, the above updates are released as hotfix releases to address specific issues. The KB 2775511 update is an cumulative hotfix update that is exclusively available via the https://catalog.update.microsoft.com site. By being available only through the windows update catalog, the KB 2775511 update is not considered a security update and is not being deployed broadly.  

 

In terms of workarounds, the following options are potential options while further investigation continues between Microsoft and the reporting customer:

 

  •  Not installing the KB 2775511 update and updates since release of the KB 2775511 update that has a newer RDBSS.sys component (KB 2732673, KB 2824408)
  •  Hosting the remote data on a machine running a lower version of SMB such as Windows 2003
  •  Disabling SMB 2.0 on the remote machine hosting the data being truncated.   Please note this is not recommended unless absolutely necessary as detailed in the following article by Microsoft on disabling SMB 2.0:

             https://support.microsoft.com/kb/2696547

      

 

UPDATE: The hotfix is currently still under development with the update being in testing. The update is on track to be released within the next 60 days (August 2013).  

UPDATE: The update for the issue documented here has released. The update is available as of today at under KB article 2732673:    https://support.microsoft.com/kb/2732673