{"id":26278,"date":"2022-08-24T22:02:19","date_gmt":"2022-08-24T20:02:19","guid":{"rendered":"http:\/\/159.69.82.204\/win\/?p=26278"},"modified":"2022-08-24T22:02:19","modified_gmt":"2022-08-24T20:02:19","slug":"vmware-carbon-black-erzeugt-bsod-in-windows-august-2022","status":"publish","type":"post","link":"https:\/\/borncity.com\/win\/2022\/08\/24\/vmware-carbon-black-erzeugt-bsod-in-windows-august-2022\/","title":{"rendered":"VMware Carbon Black creates BSOD in Windows (August 2022)"},"content":{"rendered":"<p><img decoding=\"async\" title=\"Windows\" style=\"float: left; margin: 0px 10px 0px 0px; display: inline\" alt=\"Windows\" src=\"https:\/\/www.borncity.com\/blog\/wp-content\/uploads\/2021\/04\/Windows-klein.jpg\" width=\"200\" align=\"left\">[<a href=\"https:\/\/www.borncity.com\/blog\/2022\/08\/24\/vmware-carbon-black-erzeugt-bsod-in-windows-august-2022\/\" target=\"_blank\" rel=\"noopener\">German<\/a>]VMware users running Carbon Black Cloud Sensor version 3.6.0.1979 &#8211; 3.8.0.398 were greeted with blue screens on their Windows systems as of August 23, 2022. The cause is an update for Carbon Black Sensor 3.7.0.1253, which is responsible for this behavior.<\/p>\n<p><!--more--><\/p>\n<p><img loading=\"lazy\" decoding=\"async\" alt=\"\" src=\"https:\/\/vg05.met.vgwort.de\/na\/a23405f00ff241edbf9470f05a585f48\" width=\"1\" height=\"1\">I became aware of this issue last night with the colleagues at Bleeping Computer &#8211; they addressed it in <a href=\"https:\/\/www.bleepingcomputer.com\/news\/security\/vmware-carbon-black-causing-bsod-crashes-on-windows\/\" target=\"_blank\" rel=\"noopener\">this article<\/a> and on <a href=\"https:\/\/twitter.com\/BleepinComputer\/status\/1562193599525457921\" target=\"_blank\" rel=\"noopener\">Twitter<\/a>.&nbsp; <\/p>\n<p><a href=\"https:\/\/twitter.com\/BleepinComputer\/status\/1562193599525457921\" target=\"_blank\" rel=\"noopener\"><img decoding=\"async\" title=\"VMware Carbon Black BSOD\" alt=\"VMware Carbon Black BSOD\" src=\"https:\/\/i.imgur.com\/g0d6RZM.png\"><\/a><\/p>\n<p>The cause of the issue is a ruleset implemented in Carbon Black Cloud Sensor 3.6.0.1979 &#8211; 3.8.0.398 that causes Windows systems to crash with a BlueScreen. Affected systems include Microsoft Windows 10 x64, Windows Server 2012 R2 x64, Windows Server 2016 x64 and Windows Server 2019 x64. The affected systems are running Carbon Black Sensor 3.7.0.1253 and display the \"PFN_LIST_CORRUPT\" error, writes a user who investigated. The machines then fail to boot. VMware confirmed the issue to BleepingComputer:<\/p>\n<blockquote>\n<p><em>\"VMware Carbon Black is aware of an issue affecting a limited number of customer endpoints, where certain older sensor versions were impacted by an update of our behavioral preventative capabilities. The issue has been identified and corrected, and VMware Carbon Black is working with impacted customers.\"<\/em><\/p>\n<\/blockquote>\n<p>Anyone affected by this issue?<\/p>\n","protected":false},"excerpt":{"rendered":"<p>[German]VMware users running Carbon Black Cloud Sensor version 3.6.0.1979 &#8211; 3.8.0.398 were greeted with blue screens on their Windows systems as of August 23, 2022. The cause is an update for Carbon Black Sensor 3.7.0.1253, which is responsible for this &hellip; <a href=\"https:\/\/borncity.com\/win\/2022\/08\/24\/vmware-carbon-black-erzeugt-bsod-in-windows-august-2022\/\">Continue reading <span class=\"meta-nav\">&rarr;<\/span><\/a><\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[463,2],"tags":[651,194],"class_list":["post-26278","post","type-post","status-publish","format-standard","hentry","category-issue","category-windows","tag-virtualization","tag-windows"],"_links":{"self":[{"href":"https:\/\/borncity.com\/win\/wp-json\/wp\/v2\/posts\/26278","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/borncity.com\/win\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/borncity.com\/win\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/borncity.com\/win\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/borncity.com\/win\/wp-json\/wp\/v2\/comments?post=26278"}],"version-history":[{"count":0,"href":"https:\/\/borncity.com\/win\/wp-json\/wp\/v2\/posts\/26278\/revisions"}],"wp:attachment":[{"href":"https:\/\/borncity.com\/win\/wp-json\/wp\/v2\/media?parent=26278"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/borncity.com\/win\/wp-json\/wp\/v2\/categories?post=26278"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/borncity.com\/win\/wp-json\/wp\/v2\/tags?post=26278"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}