Microsoft: Whoops, Patch Tuesday might screw your database connections
(2022/12/08)
- Reference: 1670457673
- News link: https://www.theregister.co.uk/2022/12/08/microsoft_windows_update_odbc/
- Source link:
Applications using the Open Database Connectivity (ODBC) interface may fail to connect after installing the November Patch Tuesday Windows updates, according to Microsoft.
Users may see the apps that use the Microsoft ODBC SQL Server Driver have problems, with some attempts to access databases generating an error message when the connection fails, the software maker [1]wrote this week in its Windows Health Dashboard.
The error message from SQL Server may read as "The EMS System encountered a problem" with "Message: [Microsoft][ODBC SQL Server Driver] Protocol error in TDS Stream" or "Message: [Microsoft][ODBC SQL Server Driver]Unknown token received from SQL Server."
[2]
The problem affects apps running on systems of users who installed the [3]KB5019980 security update.
[4]
[5]
On clients, operating systems impacted are Windows 11 versions 22H2 and 21H2, Windows 10 versions 22H2, 21H1, and 20H2, Windows 10 Enterprise LTSC 2019 and LTSC 2016, Windows 10 Enterprise 2015 LTSB, Windows 8.1; and Windows 7 SP1.
Also affected Windows Server 2022, 2019, 2016, Windows Server 2012 R2 and 2012, Windows Server 2008 R2 SP1, and Windows Server 2008 SP2.
[6]
Windows users who are unsure if they are using any affected apps can open any app that uses a database and then open Command Prompt by selecting Start and typing "command prompt," then selecting it.
After that, they can type the command: tasklist /m sqlsrv32.dll.
[7]Windows Server domain controllers may stop, restart after recent updates
[8]Microsoft's attempts to harden Kerberos authentication broke it on Windows Servers
[9]Microsoft squashes six security bugs already exploited in the wild
[10]Microsoft feels the need, the need for speed in Teams
Microsoft said it's working on a fix that will be in an update in an upcoming release. No workaround was offered.
The KB5019980 update was aimed at fixing an issue that caused File Explorer to fail to localize folders as well as addressing other security problems in Windows.
Microsoft [11]describes ODBC as a call-level interface that enables applications to access data in any database that uses an ODBC driver.
[12]
"Using ODBC, you can create database applications with access to any database for which your end user has an ODBC driver," the company wrote last year. "ODBC provides an API that allows your application to be independent of the source database management system (DBMS)."
The vendor has been busy over the past several weeks resolving issues arising out of the November Patch Tuesday updates. Those issues include Windows Servers domain controllers that [13]stop working or automatically restart and [14]disruptions to the Kerberos network authentication protocol on Windows Servers with domain controller duties.
In addition, some users who installed November updates to Windows 10 and 11 were [15]unable to reconnect to the Direct Access remote connectivity feature if they temporarily lost connectivity with the network or were transitioning between Wi-Fi networks or access points. ®
Get our [16]Tech Resources
[1] https://learn.microsoft.com/en-us/windows/release-health/status-windows-11-22H2
[2] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_software/front&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=2&c=2Y5Fvbws1ILMV-xIhn1WhxAAAAAI&t=ct%3Dns%26unitnum%3D2%26raptor%3Dcondor%26pos%3Dtop%26test%3D0
[3] https://support.microsoft.com/en-us/topic/november-8-2022-kb5019980-os-build-22621-819-b503e08b-b850-469a-8de9-74df8aebd5f4
[4] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_software/front&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=4&c=44Y5Fvbws1ILMV-xIhn1WhxAAAAAI&t=ct%3Dns%26unitnum%3D4%26raptor%3Dfalcon%26pos%3Dmid%26test%3D0
[5] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_software/front&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=3&c=33Y5Fvbws1ILMV-xIhn1WhxAAAAAI&t=ct%3Dns%26unitnum%3D3%26raptor%3Deagle%26pos%3Dmid%26test%3D0
[6] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_software/front&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=4&c=44Y5Fvbws1ILMV-xIhn1WhxAAAAAI&t=ct%3Dns%26unitnum%3D4%26raptor%3Dfalcon%26pos%3Dmid%26test%3D0
[7] https://www.theregister.com/2022/11/28/microsoft_windows_server_lsass/
[8] https://www.theregister.com/2022/11/21/microsoft_kerberos_fix_windows/
[9] https://www.theregister.com/2022/11/09/microsoft_november_2022_patch_tuesday/
[10] https://www.theregister.com/2022/11/04/microsoft_faster_teams/
[11] https://learn.microsoft.com/en-us/cpp/data/odbc/odbc-basics?view=msvc-170
[12] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_software/front&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=3&c=33Y5Fvbws1ILMV-xIhn1WhxAAAAAI&t=ct%3Dns%26unitnum%3D3%26raptor%3Deagle%26pos%3Dmid%26test%3D0
[13] https://www.theregister.com/2022/11/28/microsoft_windows_server_lsass/
[14] https://www.theregister.com/2022/11/21/microsoft_kerberos_fix_windows/
[15] https://www.theregister.com/2022/11/15/microsoft_bug_direct_access/
[16] https://whitepapers.theregister.com/
Users may see the apps that use the Microsoft ODBC SQL Server Driver have problems, with some attempts to access databases generating an error message when the connection fails, the software maker [1]wrote this week in its Windows Health Dashboard.
The error message from SQL Server may read as "The EMS System encountered a problem" with "Message: [Microsoft][ODBC SQL Server Driver] Protocol error in TDS Stream" or "Message: [Microsoft][ODBC SQL Server Driver]Unknown token received from SQL Server."
[2]
The problem affects apps running on systems of users who installed the [3]KB5019980 security update.
[4]
[5]
On clients, operating systems impacted are Windows 11 versions 22H2 and 21H2, Windows 10 versions 22H2, 21H1, and 20H2, Windows 10 Enterprise LTSC 2019 and LTSC 2016, Windows 10 Enterprise 2015 LTSB, Windows 8.1; and Windows 7 SP1.
Also affected Windows Server 2022, 2019, 2016, Windows Server 2012 R2 and 2012, Windows Server 2008 R2 SP1, and Windows Server 2008 SP2.
[6]
Windows users who are unsure if they are using any affected apps can open any app that uses a database and then open Command Prompt by selecting Start and typing "command prompt," then selecting it.
After that, they can type the command: tasklist /m sqlsrv32.dll.
[7]Windows Server domain controllers may stop, restart after recent updates
[8]Microsoft's attempts to harden Kerberos authentication broke it on Windows Servers
[9]Microsoft squashes six security bugs already exploited in the wild
[10]Microsoft feels the need, the need for speed in Teams
Microsoft said it's working on a fix that will be in an update in an upcoming release. No workaround was offered.
The KB5019980 update was aimed at fixing an issue that caused File Explorer to fail to localize folders as well as addressing other security problems in Windows.
Microsoft [11]describes ODBC as a call-level interface that enables applications to access data in any database that uses an ODBC driver.
[12]
"Using ODBC, you can create database applications with access to any database for which your end user has an ODBC driver," the company wrote last year. "ODBC provides an API that allows your application to be independent of the source database management system (DBMS)."
The vendor has been busy over the past several weeks resolving issues arising out of the November Patch Tuesday updates. Those issues include Windows Servers domain controllers that [13]stop working or automatically restart and [14]disruptions to the Kerberos network authentication protocol on Windows Servers with domain controller duties.
In addition, some users who installed November updates to Windows 10 and 11 were [15]unable to reconnect to the Direct Access remote connectivity feature if they temporarily lost connectivity with the network or were transitioning between Wi-Fi networks or access points. ®
Get our [16]Tech Resources
[1] https://learn.microsoft.com/en-us/windows/release-health/status-windows-11-22H2
[2] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_software/front&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=2&c=2Y5Fvbws1ILMV-xIhn1WhxAAAAAI&t=ct%3Dns%26unitnum%3D2%26raptor%3Dcondor%26pos%3Dtop%26test%3D0
[3] https://support.microsoft.com/en-us/topic/november-8-2022-kb5019980-os-build-22621-819-b503e08b-b850-469a-8de9-74df8aebd5f4
[4] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_software/front&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=4&c=44Y5Fvbws1ILMV-xIhn1WhxAAAAAI&t=ct%3Dns%26unitnum%3D4%26raptor%3Dfalcon%26pos%3Dmid%26test%3D0
[5] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_software/front&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=3&c=33Y5Fvbws1ILMV-xIhn1WhxAAAAAI&t=ct%3Dns%26unitnum%3D3%26raptor%3Deagle%26pos%3Dmid%26test%3D0
[6] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_software/front&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=4&c=44Y5Fvbws1ILMV-xIhn1WhxAAAAAI&t=ct%3Dns%26unitnum%3D4%26raptor%3Dfalcon%26pos%3Dmid%26test%3D0
[7] https://www.theregister.com/2022/11/28/microsoft_windows_server_lsass/
[8] https://www.theregister.com/2022/11/21/microsoft_kerberos_fix_windows/
[9] https://www.theregister.com/2022/11/09/microsoft_november_2022_patch_tuesday/
[10] https://www.theregister.com/2022/11/04/microsoft_faster_teams/
[11] https://learn.microsoft.com/en-us/cpp/data/odbc/odbc-basics?view=msvc-170
[12] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_software/front&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=3&c=33Y5Fvbws1ILMV-xIhn1WhxAAAAAI&t=ct%3Dns%26unitnum%3D3%26raptor%3Deagle%26pos%3Dmid%26test%3D0
[13] https://www.theregister.com/2022/11/28/microsoft_windows_server_lsass/
[14] https://www.theregister.com/2022/11/21/microsoft_kerberos_fix_windows/
[15] https://www.theregister.com/2022/11/15/microsoft_bug_direct_access/
[16] https://whitepapers.theregister.com/
Re: JFC! do they actually test anything these days
James Loughner
Perfect security
Re: JFC! do they actually test anything these days
Code For Broke
Sorry, downvotes. Shirley you can't be serious? I know we're all supposed to be slaves to Cloud now, but I'd say 1/3 of my work is done over an ODBC.
James Loughner
Perfect security
Clowns
FlamingDeath
They’re scary, keep them away from businesses, because they will trash it.
Oh wait… too late
Good luck, and when things get really shit, you can always play Candy Crush, its in the start menu of your “business machine”
Jdbc hit?
schafdog
Wonder if Java using jdbc is hit? Then I know a company or two that are down
JFC! do they actually test anything these days
9 days since the exact same comment for the last update calamity.
Luckily this won't affect anyone, nobody uses databases and if they do, they're not uptime sensitive and can wait until MS can be arsed to fix thier shit.