After upgrading to 10.4.2.1 or 10.4.2.2 (20.2.3 or 20.2.5) all SpectroSERVERs are crashing.
SPC-OCP-10048: The SpectroSERVER process exited with error: The system detected an overrun of stack-based buffer in the application. This overrun could potentially allow a malicious user to gain control of this application.
In the event log:
Release : 20.2.3
Component : Spectrum Core / SpectroSERVER
This is caused by a flaw in SNMPv3 code.
This fix for this issue is addressed in Spectrum 10.4.2.1 with the 10.04.02.01.D87 patch.
This fix for this issue is addressed in Spectrum 10.4.2.2 with the 10.04.02.02.D95 patch.
This fix will be included in Spectrum out of the box in 10.4.3 and 21.2.1.
After installing the patch, you will need to set the following parameters in the $SPECROOT/SS/.vnmrc file before starting the SpectroSERVER:
As a workaround:
1. Stop the SpectroSERVER
2. Stop processd
3. Replace the $SPECROOT/SS/libhpse.dll (10.4.2.1) file from $SPECROOT/Install-Tools/LOGS10.4.2.1.73_yyyymmdd/UnInstallData.hh.mm/SS/ directory, another system of Spectrum 10.4.2, or from the backup folder if available. If not, please contact support to provide the file. Make sure the libhpse.dll is a 10.4.2.0 version.
4. Set stack_size_modifier=2 in the $SPECROOT/SS/vnmrc file and stop/start the SpectroSERVER application to put the change in place.
This parameter will help stabilize the SpectroSERVER.
IMPORTANT: If you are running a fault-tolerant Spectrum Server installation the libhpse.dll needs to be replaced on both the primary and secondary landscape or switchover will not work properly.
5. Restart processd
6. Restart the SpectroSERVER