| Name | CVE-2014-3873 |
| Description | The ktrace utility in the FreeBSD kernel 8.4 before p11, 9.1 before p14, 9.2 before p7, and 9.3-BETA1 before p1 uses an incorrect page fault kernel trace entry size, which allows local users to obtain sensitive information from kernel memory via a kernel process trace. |
| Source | CVE (at NVD; CERT, LWN, oss-sec, fulldisc, Red Hat, Ubuntu, Gentoo, SUSE bugzilla/CVE, GitHub advisories/code/issues, web search, more) |
| Debian Bugs | 750493 |
The information below is based on the following data on fixed versions.
| Package | Type | Release | Fixed Version | Urgency | Origin | Debian Bugs |
|---|---|---|---|---|---|---|
| kfreebsd-8 | source | squeeze | (unfixed) | end-of-life | ||
| kfreebsd-8 | source | (unstable) | (unfixed) | |||
| kfreebsd-9 | source | wheezy | (not affected) | |||
| kfreebsd-9 | source | (unstable) | (unfixed) | 750493 |
[wheezy] - kfreebsd-8 <no-dsa> (Non standard kernel, will be fixed in a point update)
[squeeze] - kfreebsd-8 <end-of-life> (Unsupported in squeeze-lts)
[wheezy] - kfreebsd-9 <not-affected> (introduced by the merge of r237663)