CVE-2014-3873

Name	CVE-2014-3873
Description	The ktrace utility in the FreeBSD kernel 8.4 before p11, 9.1 before p14, 9.2 before p7, and 9.3-BETA1 before p1 uses an incorrect page fault kernel trace entry size, which allows local users to obtain sensitive information from kernel memory via a kernel process trace.
Source	CVE (at NVD; CERT, ENISA, LWN, oss-sec, fulldisc, Debian ELTS, Red Hat, Ubuntu, Gentoo, SUSE bugzilla/CVE, GitHub advisories/code/issues, web search, more)
Debian Bugs	750493

The information below is based on the following data on fixed versions.

Package	Type	Release	Fixed Version	Urgency	Debian Bugs
kfreebsd-8	source	squeeze	(unfixed)	end-of-life
kfreebsd-8	source	(unstable)	(unfixed)
kfreebsd-9	source	wheezy	(not affected)
kfreebsd-9	source	(unstable)	(unfixed)		750493

Notes

[wheezy] - kfreebsd-8 <no-dsa> (Non standard kernel, will be fixed in a point update)
[squeeze] - kfreebsd-8 <end-of-life> (Unsupported in squeeze-lts)
[wheezy] - kfreebsd-9 <not-affected> (introduced by the merge of r237663)