Incidentsby GlyphFalcon Channel File 291 update crashes Windows hosts worldwide
Jul 19, 04:09 UTCJul 19, 05:27 UTC
Duration
1h 18m
Impact
Critical
Root cause
Config change
CrowdStrike, 90 days
0 incidents
Affected
Falcon sensor for WindowsGlobal
Lesson: Content and configuration updates need the same staged rollout, validation and customer control as code releases.
What happened
A Rapid Response Content update for the Falcon sensor defined 21 input fields while the sensor code supplied 20, causing an out-of-bounds read and a crash on Windows hosts that received it between 04:09 and 05:27 UTC. Affected machines needed manual recovery for days.