Resolve termdd blue screen errors (e.g. 0x000000D1) on Windows Server 2008 R2 by applying the CVE-2019-0708 security patch.
Symptoms
A termdd blue screen error with error code 0x000000D1 occurs on an ECS instance running Windows Server 2008 R2.

The dump file shows the termdd.sys (C:\Windows\System32\drivers\termdd.sys) version is earlier than 6.1.7601.24441.
Cause
This issue is caused by vulnerability CVE-2019-0708, which Microsoft patched on May 14, 2019.
Solution
-
Update the operating system.
Update the OS with Windows Update
Use Windows Update to install the latest security patches.
-
Connect to the ECS instance. See Connect to a Windows instance using Workbench.
-
Modify the WSUS address in the registry.
-
Go to Start > Run, and enter regedit.
-
Navigate to
Computer\HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate. SetWUServerandWUStatusServertohttp://update.cloud.aliyuncs.com.
-
-
Choose Start > Control Panel > System and Security > Windows Update.
-
After the scan completes, click Install Updates.
-
Restart the instance after the updates are installed.
Manually install the patch
-
Connect to the ECS instance. See Connect to a Windows instance using Workbench.
-
Download the cumulative patch KB4499164 or the security-only patch KB4499175.
-
Double-click the patch to install it.
-
Restart the instance.
Update the OS with Cloud Assistant
Log in to the ECS console.
In the left-side navigation pane, choose .
-
On the Common Commands tab, find
ACS-ECS-ApplySecurityPatches-for-windows.ps1and click Run.
-
Select the target Windows instance, configure the parameters, and run the command.
-
-
Verify the fix.
-
Check the installed patches.
Open Command Prompt and run
systeminfo. Confirm that KB4499164 or KB4499175 is listed.
-
Check the
termdd.sysversion.Confirm that
termdd.sys (C:\Windows\System32\drivers\termdd.sys)is version6.1.7601.24441or later.
If KB4499164 or KB4499175 is installed and
termdd.sysis version6.1.7601.24441or later, the blue screen issue is resolved. -