CB Protection: High CPU when specific MSIs are discovered

Products

• Carbon Black App Control (formerly Cb Protection)

Issue/Introduction

• Parity.exe uses more and more CPU till it maxes out
• Reboot resolves the issue temporarily but returns after rediscovery

Environment

CB Protection Agent: 8.1.6

Cause

This is caused by a validation loop that is possible with a small subset of MSI files. The issue has been identified internally as EP-10222

Resolution

This is fixed in the 8.1.8 Agent found here