CVE-2014-3873

Severity CVSS v4.0:
Pending analysis
Type:
CWE-20 Input Validation
Publication date:
10/06/2014
Last modified:
12/04/2025

Description

The ktrace utility in the FreeBSD kernel 8.4 before p11, 9.1 before p14, 9.2 before p7, and 9.3-BETA1 before p1 uses an incorrect page fault kernel trace entry size, which allows local users to obtain sensitive information from kernel memory via a kernel process trace.

Vulnerable products and versions

CPE From Up to
cpe:2.3:o:freebsd:freebsd:8.4:*:*:*:*:*:*:*
cpe:2.3:o:freebsd:freebsd:9.1:*:*:*:*:*:*:*
cpe:2.3:o:freebsd:freebsd:9.2:-:*:*:*:*:*:*
cpe:2.3:o:freebsd:freebsd:9.3:beta1:*:*:*:*:*:*