Memory leak in sqlserver.exe process with the Host Intrusion Prevention 8.0 SQL engine

Technical Articles ID: KB81968
Last Modified: 4/6/2017

Environment

McAfee Host Intrusion Prevention (Host IPS) 8.0

Problem

McAfee has identified a problem with Host IPS process monitoring for the sqlserver.exe process on SQL versions not yet officially supported.

This issue was reported on:

SQL Server 2008 version 10.00.5841, build 2007.100.5841.0
2834048 Cumulative update package 11 (CU11) for SQL Server 2008 Service Pack 3 (updated)
Released June 13, 2013.

Cause

This issue occurs as a result of incorrect process monitoring for sqlserver.exe, which may cause process memory leakage to occur.

Solution

This issue is resolved in Host IPS 8.0 Patch 7, Hotfix 1121080.

Updates are available when you log on to the ServicePortal at: https://support.mcafee.com/downloads.

Workaround

Verify you are running Host IPS 8.0 on a supported version of Microsoft SQL Server. See KB65845 for details.

If you are running an unsupported version of SQL server, McAfee recommends that you disable the IPS SQL engine on the SQL server.

To disable the Host IPS SQL engine on the server running the unsupported SQL:

Locally from the Host IPS Client UI:
1. Unlock the GUI.
2. Click Help, Troubleshooting, Functionality, HIPS Engines.
3. Deselect SQL engine.
Via ePolicy Orchestrator (ePO):
1. Log on to the ePO console.
2. Click Menu, Policy, Policy Catalog.
3. Select General for Product and ClientUI for Category.
4. Click the Troubleshooting tab.
5. Deselect SQL from the Enable IPS engines section.
6. Click Save.

Related Information

KB65845 - Host Intrusion Prevention support for SQL Server Versions
KB70778 - Supported platforms, environments, and operating systems for Host Intrusion Prevention 8.0

Affected Products

Host Intrusion Prevention 8.0
Known Issue/Product Defect

Languages:

This article is available in the following languages:

English United States
Spanish Spain
Japanese

Glossary of Technical Terms

Highlight Glossary Terms

Please take a moment to browse our Glossary of Technical Terms.

Memory leak in sqlserver.exe process with the Host Intrusion Prevention 8.0 SQL engine

Environment

Problem

Cause

Solution

Workaround

Related Information

Affected Products

Languages:

Glossary of Technical Terms

Title

Title

Featured Solutions

Explore Our Portfolio

Security Outcomes

Industries

Products

Featured Solutions

Explore Our Portfolio

MVISION Products

Services & Training

Threat Research

Our Researchers

Threat Landscape Dashboard

Tools

Contact Us

Resources

Downloads

Product Help

Connect with Us

Explore

Our Company

Our Efforts

Other Resources

Careers

Partnerships

Memory leak in sqlserver.exe process with the Host Intrusion Prevention 8.0 SQL engine

Environment

Problem

Cause

Solution

Workaround

Related Information

Affected Products

Languages:

Glossary of Technical Terms

Choose your region

Title

Title