MNBSD-2014-5: Kernel memory disclosure via ktrace page fault entries

Description

Ktrace page fault kernel trace entries were set to an incorrect size, resulting in a leak of information. A local user with ktrace access could read uninitialized kernel memory, potentially disclosing sensitive data.

Affected Versions

kernel

Recommendations

No specific recommendations provided.

References

• https://www.freebsd.org/security/advisories/FreeBSD-SA-14:12.ktrace.asc
• https://www.cve.org/CVERecord?id=CVE-2014-3873

Additional Information

Aliases: CVE-2014-3873

Published: June 04, 2014
Last Modified: June 04, 2014