Vulnerability-Lookup

CVE-2012-5625 (GCVE-0-2012-5625)

Vulnerability from cvelistv5 – Published: 2012-12-26 22:00 – Updated: 2026-10-30 18:03

Title

Openstack nova: information leak in libvirt lvm-backed instances

Summary

OpenStack Compute (Nova) Folsom before 2012.2.2 and Grizzly, when using libvirt and LVM backed instances, does not properly clear physical volume (PV) content when reallocating for instances, which allows attackers to obtain sensitive information by reading the memory of the previous logical volume (LV).

Severity

6.5 (Medium)


                        
                          CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N

CWE

CWE-212 - Improper Removal of Sensitive Information Before Storage or Transfer

Assigner

redhat CNA under the redhat root

CNA scorecard B 82/100 over 1082 records in the last 180 days details

References

12 references

URL	Tags
http://osvdb.org/88419
http://rhn.redhat.com/errata/RHSA-2013-0208.html
http://www.openwall.com/lists/oss-security/2012/12/11/5
http://www.securityfocus.com/bid/56904
http://www.ubuntu.com/usn/USN-1663-1
https://access.redhat.com/errata/RHSA-2013:0208	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/security/cve/CVE-2012-5625	vdb-entryx_refsource_REDHAT
https://bugs.launchpad.net/nova/+bug/1070539
https://bugzilla.redhat.com/show_bug.cgi?id=884293
https://github.com/openstack/nova/commit/9d2ea970…
https://github.com/openstack/nova/commit/a99a802e…
https://launchpad.net/nova/folsom/2012.2.2

Impacted products

4 products

Vendor	Product	Version
Red Hat	OpenStack Folsom for RHEL 6	Unaffected: 0:2012.2.2-8.el6ost , < * (rpm) cpe:/a:redhat:openstack:2::el6
Red Hat	Red Hat OpenStack Platform 16.2	cpe:/a:redhat:openstack:16.2
Red Hat	Red Hat OpenStack Platform 17.1	cpe:/a:redhat:openstack:17.1
Red Hat	Red Hat OpenStack Platform 18.0	cpe:/a:redhat:openstack:18.0

Date Public

2012-12-26 22:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T21:14:16.142Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "RHSA-2013:0208",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2013-0208.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugs.launchpad.net/nova/+bug/1070539"
          },
          {
            "name": "USN-1663-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-1663-1"
          },
          {
            "name": "56904",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/56904"
          },
          {
            "name": "88419",
            "tags": [
              "vdb-entry",
              "x_refsource_OSVDB",
              "x_transferred"
            ],
            "url": "http://osvdb.org/88419"
          },
          {
            "name": "[oss-security] 20121211 [OSSA 2012-020] Information leak in libvirt LVM-backed instances (CVE-2012-5625)",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2012/12/11/5"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://launchpad.net/nova/folsom/2012.2.2"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=884293"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://github.com/openstack/nova/commit/a99a802e008eed18e39fc1d98170edc495cbd354"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://github.com/openstack/nova/commit/9d2ea970422591f8cdc394001be9a2deca499a5f"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:openstack:2::el6"
          ],
          "defaultStatus": "affected",
          "packageName": "openstack-nova",
          "product": "OpenStack Folsom for RHEL 6",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:2012.2.2-8.el6ost",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:openstack:16.2"
          ],
          "defaultStatus": "unaffected",
          "packageName": "openstack-nova",
          "product": "Red Hat OpenStack Platform 16.2",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:openstack:17.1"
          ],
          "defaultStatus": "unaffected",
          "packageName": "openstack-nova",
          "product": "Red Hat OpenStack Platform 17.1",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:openstack:18.0"
          ],
          "defaultStatus": "unaffected",
          "packageName": "openstack-nova",
          "product": "Red Hat OpenStack Platform 18.0",
          "vendor": "Red Hat"
        }
      ],
      "datePublic": "2012-12-26T22:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "OpenStack Compute (Nova) Folsom before 2012.2.2 and Grizzly, when using libvirt and LVM backed instances, does not properly clear physical volume (PV) content when reallocating for instances, which allows attackers to obtain sensitive information by reading the memory of the previous logical volume (LV)."
        }
      ],
      "metrics": [
        {
          "other": {
            "content": {
              "namespace": "https://access.redhat.com/security/updates/classification/",
              "value": "Moderate"
            },
            "type": "Red Hat severity rating"
          }
        },
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "NONE",
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "NONE",
            "privilegesRequired": "LOW",
            "scope": "CHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N",
            "version": "3.1"
          },
          "format": "CVSS"
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-212",
              "description": "Improper Removal of Sensitive Information Before Storage or Transfer",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-10-30T18:03:44.974Z",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "url": "http://osvdb.org/88419"
        },
        {
          "url": "http://rhn.redhat.com/errata/RHSA-2013-0208.html"
        },
        {
          "url": "http://www.openwall.com/lists/oss-security/2012/12/11/5"
        },
        {
          "url": "http://www.securityfocus.com/bid/56904"
        },
        {
          "url": "http://www.ubuntu.com/usn/USN-1663-1"
        },
        {
          "name": "RHSA-2013:0208",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2013:0208"
        },
        {
          "tags": [
            "vdb-entry",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/security/cve/CVE-2012-5625"
        },
        {
          "url": "https://bugs.launchpad.net/nova/+bug/1070539"
        },
        {
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=884293"
        },
        {
          "url": "https://github.com/openstack/nova/commit/9d2ea970422591f8cdc394001be9a2deca499a5f"
        },
        {
          "url": "https://github.com/openstack/nova/commit/a99a802e008eed18e39fc1d98170edc495cbd354"
        },
        {
          "url": "https://launchpad.net/nova/folsom/2012.2.2"
        }
      ],
      "timeline": [
        {
          "lang": "en",
          "time": "2026-04-02T15:03:07.830Z",
          "value": "Reported to Red Hat."
        },
        {
          "lang": "en",
          "time": "2012-12-26T22:00:00.000Z",
          "value": "Made public."
        }
      ],
      "title": "Openstack nova: information leak in libvirt lvm-backed instances",
      "workarounds": [
        {
          "lang": "en",
          "value": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability."
        }
      ],
      "x_generator": {
        "engine": "cvelib 1.8.0"
      },
      "x_redhatCweChain": "CWE-212: Improper Removal of Sensitive Information Before Storage or Transfer"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2012-5625",
    "datePublished": "2012-12-26T22:00:00.000Z",
    "dateReserved": "2012-10-24T00:00:00.000Z",
    "dateUpdated": "2026-10-30T18:03:44.974Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2",
  "vulnerability-lookup:meta": {
    "epss": {
      "cve": "CVE-2012-5625",
      "date": "2026-11-01",
      "epss": "0.0135",
      "percentile": "0.71511"
    },
    "nvd": {
      "cve": {
        "affected": [
          {
            "affectedData": [
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:openstack:2::el6"
                ],
                "defaultStatus": "affected",
                "packageName": "openstack-nova",
                "product": "OpenStack Folsom for RHEL 6",
                "vendor": "Red Hat",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "unaffected",
                    "version": "0:2012.2.2-8.el6ost",
                    "versionType": "rpm"
                  }
                ]
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:openstack:16.2"
                ],
                "defaultStatus": "unaffected",
                "packageName": "openstack-nova",
                "product": "Red Hat OpenStack Platform 16.2",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:openstack:17.1"
                ],
                "defaultStatus": "unaffected",
                "packageName": "openstack-nova",
                "product": "Red Hat OpenStack Platform 17.1",
                "vendor": "Red Hat"
              },
              {
                "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                "cpes": [
                  "cpe:/a:redhat:openstack:18.0"
                ],
                "defaultStatus": "unaffected",
                "packageName": "openstack-nova",
                "product": "Red Hat OpenStack Platform 18.0",
                "vendor": "Red Hat"
              }
            ],
            "source": "secalert@redhat.com"
          }
        ],
        "configurations": [
          {
            "nodes": [
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:a:openstack:folsom:2012.2:*:*:*:*:*:*:*",
                    "matchCriteriaId": "E76B76AB-D744-4163-8615-7BA18ABB1347",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:openstack:grizzly:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "A83ED744-9E3D-4510-B3E6-6DDE1090F0B7",
                    "vulnerable": true
                  }
                ],
                "negate": false,
                "operator": "OR"
              }
            ]
          }
        ],
        "cveTags": [],
        "descriptions": [
          {
            "lang": "en",
            "value": "OpenStack Compute (Nova) Folsom before 2012.2.2 and Grizzly, when using libvirt and LVM backed instances, does not properly clear physical volume (PV) content when reallocating for instances, which allows attackers to obtain sensitive information by reading the memory of the previous logical volume (LV)."
          },
          {
            "lang": "es",
            "value": "OpenStack Compute (Nova) Folsom antes de 2012.2.2 y Grizzly, cuando utiliza instancias con respaldo libvirt y LVM, no limpia adecuadamente el contenido del volumen f\u00edsico  (PV) cuando se reasignan las instancias, lo que permite a los atacantes obtener informaci\u00f3n sensible mediante la lectura de la memoria de la anterior volumen l\u00f3gico (LV).\r\n"
          }
        ],
        "id": "CVE-2012-5625",
        "lastModified": "2026-10-30T19:17:26.493",
        "metrics": {
          "cvssMetricV2": [
            {
              "acInsufInfo": false,
              "baseSeverity": "MEDIUM",
              "cvssData": {
                "accessComplexity": "MEDIUM",
                "accessVector": "NETWORK",
                "authentication": "NONE",
                "availabilityImpact": "NONE",
                "baseScore": 4.3,
                "confidentialityImpact": "PARTIAL",
                "integrityImpact": "NONE",
                "vectorString": "AV:N/AC:M/Au:N/C:P/I:N/A:N",
                "version": "2.0"
              },
              "exploitabilityScore": 8.6,
              "impactScore": 2.9,
              "obtainAllPrivilege": false,
              "obtainOtherPrivilege": false,
              "obtainUserPrivilege": false,
              "source": "nvd@nist.gov",
              "type": "Primary",
              "userInteractionRequired": false
            }
          ],
          "cvssMetricV31": [
            {
              "cvssData": {
                "attackComplexity": "LOW",
                "attackVector": "LOCAL",
                "availabilityImpact": "NONE",
                "baseScore": 6.5,
                "baseSeverity": "MEDIUM",
                "confidentialityImpact": "HIGH",
                "integrityImpact": "NONE",
                "privilegesRequired": "LOW",
                "scope": "CHANGED",
                "userInteraction": "NONE",
                "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N",
                "version": "3.1"
              },
              "exploitabilityScore": 2.0,
              "impactScore": 4.0,
              "source": "secalert@redhat.com",
              "type": "Primary"
            }
          ]
        },
        "published": "2012-12-26T22:55:03.783",
        "references": [
          {
            "source": "secalert@redhat.com",
            "url": "http://osvdb.org/88419"
          },
          {
            "source": "secalert@redhat.com",
            "url": "http://rhn.redhat.com/errata/RHSA-2013-0208.html"
          },
          {
            "source": "secalert@redhat.com",
            "url": "http://www.openwall.com/lists/oss-security/2012/12/11/5"
          },
          {
            "source": "secalert@redhat.com",
            "url": "http://www.securityfocus.com/bid/56904"
          },
          {
            "source": "secalert@redhat.com",
            "tags": [
              "Patch"
            ],
            "url": "http://www.ubuntu.com/usn/USN-1663-1"
          },
          {
            "source": "secalert@redhat.com",
            "url": "https://access.redhat.com/errata/RHSA-2013:0208"
          },
          {
            "source": "secalert@redhat.com",
            "url": "https://access.redhat.com/security/cve/CVE-2012-5625"
          },
          {
            "source": "secalert@redhat.com",
            "url": "https://bugs.launchpad.net/nova/+bug/1070539"
          },
          {
            "source": "secalert@redhat.com",
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=884293"
          },
          {
            "source": "secalert@redhat.com",
            "tags": [
              "Patch"
            ],
            "url": "https://github.com/openstack/nova/commit/9d2ea970422591f8cdc394001be9a2deca499a5f"
          },
          {
            "source": "secalert@redhat.com",
            "tags": [
              "Patch"
            ],
            "url": "https://github.com/openstack/nova/commit/a99a802e008eed18e39fc1d98170edc495cbd354"
          },
          {
            "source": "secalert@redhat.com",
            "url": "https://launchpad.net/nova/folsom/2012.2.2"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://osvdb.org/88419"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://rhn.redhat.com/errata/RHSA-2013-0208.html"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://www.openwall.com/lists/oss-security/2012/12/11/5"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://www.securityfocus.com/bid/56904"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "tags": [
              "Patch"
            ],
            "url": "http://www.ubuntu.com/usn/USN-1663-1"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "https://bugs.launchpad.net/nova/+bug/1070539"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=884293"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "tags": [
              "Patch"
            ],
            "url": "https://github.com/openstack/nova/commit/9d2ea970422591f8cdc394001be9a2deca499a5f"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "tags": [
              "Patch"
            ],
            "url": "https://github.com/openstack/nova/commit/a99a802e008eed18e39fc1d98170edc495cbd354"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "https://launchpad.net/nova/folsom/2012.2.2"
          }
        ],
        "sourceIdentifier": "secalert@redhat.com",
        "vulnStatus": "Modified",
        "weaknesses": [
          {
            "description": [
              {
                "lang": "en",
                "value": "CWE-212"
              }
            ],
            "source": "secalert@redhat.com",
            "type": "Primary"
          },
          {
            "description": [
              {
                "lang": "en",
                "value": "CWE-200"
              }
            ],
            "source": "nvd@nist.gov",
            "type": "Secondary"
          }
        ]
      }
    },
    "redhat_vex": {
      "aggregate_severity": "Moderate",
      "current_release_date": "2026-10-30T19:01:57+00:00",
      "cve": "CVE-2012-5625",
      "id": "CVE-2012-5625",
      "initial_release_date": "2012-12-26T22:00:00+00:00",
      "product_status:fixed": "13",
      "product_status:known_not_affected": "26",
      "source": "Red Hat CSAF VEX",
      "status": "final",
      "title": "OpenStack Nova: information leak in libvirt LVM-backed instances",
      "url": "https://security.access.redhat.com/data/csaf/v2/vex/2012/cve-2012-5625.json",
      "version": "3"
    }
  }
}

FKIE_CVE-2012-5625

Vulnerability from fkie_nvd - Published: 2012-12-26 22:55 - Updated: 2026-10-30 19:17

Severity

6.5 (Medium) - CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N

Summary

References

URL	Tags
secalert@redhat.com	http://osvdb.org/88419
secalert@redhat.com	http://rhn.redhat.com/errata/RHSA-2013-0208.html
secalert@redhat.com	http://www.openwall.com/lists/oss-security/2012/12/11/5
secalert@redhat.com	http://www.securityfocus.com/bid/56904
secalert@redhat.com	http://www.ubuntu.com/usn/USN-1663-1	Patch
secalert@redhat.com	https://access.redhat.com/errata/RHSA-2013:0208
secalert@redhat.com	https://access.redhat.com/security/cve/CVE-2012-5625
secalert@redhat.com	https://bugs.launchpad.net/nova/+bug/1070539
secalert@redhat.com	https://bugzilla.redhat.com/show_bug.cgi?id=884293
secalert@redhat.com	https://github.com/openstack/nova/commit/9d2ea970422591f8cdc394001be9a2deca499a5f	Patch
secalert@redhat.com	https://github.com/openstack/nova/commit/a99a802e008eed18e39fc1d98170edc495cbd354	Patch
secalert@redhat.com	https://launchpad.net/nova/folsom/2012.2.2
af854a3a-2127-422b-91ae-364da2661108	http://osvdb.org/88419
af854a3a-2127-422b-91ae-364da2661108	http://rhn.redhat.com/errata/RHSA-2013-0208.html
af854a3a-2127-422b-91ae-364da2661108	http://www.openwall.com/lists/oss-security/2012/12/11/5
af854a3a-2127-422b-91ae-364da2661108	http://www.securityfocus.com/bid/56904
af854a3a-2127-422b-91ae-364da2661108	http://www.ubuntu.com/usn/USN-1663-1	Patch
af854a3a-2127-422b-91ae-364da2661108	https://bugs.launchpad.net/nova/+bug/1070539
af854a3a-2127-422b-91ae-364da2661108	https://bugzilla.redhat.com/show_bug.cgi?id=884293
af854a3a-2127-422b-91ae-364da2661108	https://github.com/openstack/nova/commit/9d2ea970422591f8cdc394001be9a2deca499a5f	Patch
af854a3a-2127-422b-91ae-364da2661108	https://github.com/openstack/nova/commit/a99a802e008eed18e39fc1d98170edc495cbd354	Patch
af854a3a-2127-422b-91ae-364da2661108	https://launchpad.net/nova/folsom/2012.2.2

Impacted products

	Vendor	Product	Version
	openstack	folsom	2012.2
	openstack	grizzly	-

JSON

To clipboard

{
  "affected": [
    {
      "affectedData": [
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:openstack:2::el6"
          ],
          "defaultStatus": "affected",
          "packageName": "openstack-nova",
          "product": "OpenStack Folsom for RHEL 6",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:2012.2.2-8.el6ost",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:openstack:16.2"
          ],
          "defaultStatus": "unaffected",
          "packageName": "openstack-nova",
          "product": "Red Hat OpenStack Platform 16.2",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:openstack:17.1"
          ],
          "defaultStatus": "unaffected",
          "packageName": "openstack-nova",
          "product": "Red Hat OpenStack Platform 17.1",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:openstack:18.0"
          ],
          "defaultStatus": "unaffected",
          "packageName": "openstack-nova",
          "product": "Red Hat OpenStack Platform 18.0",
          "vendor": "Red Hat"
        }
      ],
      "source": "secalert@redhat.com"
    }
  ],
  "configurations": [
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:openstack:folsom:2012.2:*:*:*:*:*:*:*",
              "matchCriteriaId": "E76B76AB-D744-4163-8615-7BA18ABB1347",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:openstack:grizzly:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "A83ED744-9E3D-4510-B3E6-6DDE1090F0B7",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ]
    }
  ],
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "OpenStack Compute (Nova) Folsom before 2012.2.2 and Grizzly, when using libvirt and LVM backed instances, does not properly clear physical volume (PV) content when reallocating for instances, which allows attackers to obtain sensitive information by reading the memory of the previous logical volume (LV)."
    },
    {
      "lang": "es",
      "value": "OpenStack Compute (Nova) Folsom antes de 2012.2.2 y Grizzly, cuando utiliza instancias con respaldo libvirt y LVM, no limpia adecuadamente el contenido del volumen f\u00edsico  (PV) cuando se reasignan las instancias, lo que permite a los atacantes obtener informaci\u00f3n sensible mediante la lectura de la memoria de la anterior volumen l\u00f3gico (LV).\r\n"
    }
  ],
  "id": "CVE-2012-5625",
  "lastModified": "2026-10-30T19:17:26.493",
  "metrics": {
    "cvssMetricV2": [
      {
        "acInsufInfo": false,
        "baseSeverity": "MEDIUM",
        "cvssData": {
          "accessComplexity": "MEDIUM",
          "accessVector": "NETWORK",
          "authentication": "NONE",
          "availabilityImpact": "NONE",
          "baseScore": 4.3,
          "confidentialityImpact": "PARTIAL",
          "integrityImpact": "NONE",
          "vectorString": "AV:N/AC:M/Au:N/C:P/I:N/A:N",
          "version": "2.0"
        },
        "exploitabilityScore": 8.6,
        "impactScore": 2.9,
        "obtainAllPrivilege": false,
        "obtainOtherPrivilege": false,
        "obtainUserPrivilege": false,
        "source": "nvd@nist.gov",
        "type": "Primary",
        "userInteractionRequired": false
      }
    ],
    "cvssMetricV31": [
      {
        "cvssData": {
          "attackComplexity": "LOW",
          "attackVector": "LOCAL",
          "availabilityImpact": "NONE",
          "baseScore": 6.5,
          "baseSeverity": "MEDIUM",
          "confidentialityImpact": "HIGH",
          "integrityImpact": "NONE",
          "privilegesRequired": "LOW",
          "scope": "CHANGED",
          "userInteraction": "NONE",
          "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N",
          "version": "3.1"
        },
        "exploitabilityScore": 2.0,
        "impactScore": 4.0,
        "source": "secalert@redhat.com",
        "type": "Primary"
      }
    ]
  },
  "published": "2012-12-26T22:55:03.783",
  "references": [
    {
      "source": "secalert@redhat.com",
      "url": "http://osvdb.org/88419"
    },
    {
      "source": "secalert@redhat.com",
      "url": "http://rhn.redhat.com/errata/RHSA-2013-0208.html"
    },
    {
      "source": "secalert@redhat.com",
      "url": "http://www.openwall.com/lists/oss-security/2012/12/11/5"
    },
    {
      "source": "secalert@redhat.com",
      "url": "http://www.securityfocus.com/bid/56904"
    },
    {
      "source": "secalert@redhat.com",
      "tags": [
        "Patch"
      ],
      "url": "http://www.ubuntu.com/usn/USN-1663-1"
    },
    {
      "source": "secalert@redhat.com",
      "url": "https://access.redhat.com/errata/RHSA-2013:0208"
    },
    {
      "source": "secalert@redhat.com",
      "url": "https://access.redhat.com/security/cve/CVE-2012-5625"
    },
    {
      "source": "secalert@redhat.com",
      "url": "https://bugs.launchpad.net/nova/+bug/1070539"
    },
    {
      "source": "secalert@redhat.com",
      "url": "https://bugzilla.redhat.com/show_bug.cgi?id=884293"
    },
    {
      "source": "secalert@redhat.com",
      "tags": [
        "Patch"
      ],
      "url": "https://github.com/openstack/nova/commit/9d2ea970422591f8cdc394001be9a2deca499a5f"
    },
    {
      "source": "secalert@redhat.com",
      "tags": [
        "Patch"
      ],
      "url": "https://github.com/openstack/nova/commit/a99a802e008eed18e39fc1d98170edc495cbd354"
    },
    {
      "source": "secalert@redhat.com",
      "url": "https://launchpad.net/nova/folsom/2012.2.2"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://osvdb.org/88419"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://rhn.redhat.com/errata/RHSA-2013-0208.html"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.openwall.com/lists/oss-security/2012/12/11/5"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.securityfocus.com/bid/56904"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Patch"
      ],
      "url": "http://www.ubuntu.com/usn/USN-1663-1"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "https://bugs.launchpad.net/nova/+bug/1070539"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "https://bugzilla.redhat.com/show_bug.cgi?id=884293"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Patch"
      ],
      "url": "https://github.com/openstack/nova/commit/9d2ea970422591f8cdc394001be9a2deca499a5f"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Patch"
      ],
      "url": "https://github.com/openstack/nova/commit/a99a802e008eed18e39fc1d98170edc495cbd354"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "https://launchpad.net/nova/folsom/2012.2.2"
    }
  ],
  "sourceIdentifier": "secalert@redhat.com",
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "description": [
        {
          "lang": "en",
          "value": "CWE-212"
        }
      ],
      "source": "secalert@redhat.com",
      "type": "Primary"
    },
    {
      "description": [
        {
          "lang": "en",
          "value": "CWE-200"
        }
      ],
      "source": "nvd@nist.gov",
      "type": "Secondary"
    }
  ]
}

GHSA-RWHR-H69G-8QMQ

Vulnerability from github – Published: 2022-05-17 05:15 – Updated: 2026-06-08 20:18

Summary

OpenStack Nova Information leak in libvirt LVM-backed instances

Details

Show details on source website

JSON

To clipboard

{
  "affected": [
    {
      "package": {
        "ecosystem": "PyPI",
        "name": "nova"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "12.0.0a0"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    }
  ],
  "aliases": [
    "CVE-2012-5625"
  ],
  "database_specific": {
    "cwe_ids": [
      "CWE-200"
    ],
    "github_reviewed": true,
    "github_reviewed_at": "2024-05-14T21:27:15Z",
    "nvd_published_at": "2012-12-26T22:55:00Z",
    "severity": "MODERATE"
  },
  "details": "OpenStack Compute (Nova) Folsom before 2012.2.2 and Grizzly, when using libvirt and LVM backed instances, does not properly clear physical volume (PV) content when reallocating for instances, which allows attackers to obtain sensitive information by reading the memory of the previous logical volume (LV).",
  "id": "GHSA-rwhr-h69g-8qmq",
  "modified": "2026-06-08T20:18:12Z",
  "published": "2022-05-17T05:15:11Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2012-5625"
    },
    {
      "type": "WEB",
      "url": "https://github.com/openstack/nova/commit/9d2ea970422591f8cdc394001be9a2deca499a5f"
    },
    {
      "type": "WEB",
      "url": "https://github.com/openstack/nova/commit/a99a802e008eed18e39fc1d98170edc495cbd354"
    },
    {
      "type": "WEB",
      "url": "https://bugs.launchpad.net/nova/+bug/1070539"
    },
    {
      "type": "WEB",
      "url": "https://bugzilla.redhat.com/show_bug.cgi?id=884293"
    },
    {
      "type": "PACKAGE",
      "url": "https://github.com/openstack/nova"
    },
    {
      "type": "WEB",
      "url": "https://github.com/pypa/advisory-database/tree/main/vulns/nova/PYSEC-2012-41.yaml"
    },
    {
      "type": "WEB",
      "url": "https://github.com/pypa/advisory-database/tree/main/vulns/nova/PYSEC-2012-42.yaml"
    },
    {
      "type": "WEB",
      "url": "https://launchpad.net/nova/folsom/2012.2.2"
    },
    {
      "type": "WEB",
      "url": "http://rhn.redhat.com/errata/RHSA-2013-0208.html"
    },
    {
      "type": "WEB",
      "url": "http://www.openwall.com/lists/oss-security/2012/12/11/5"
    },
    {
      "type": "WEB",
      "url": "http://www.ubuntu.com/usn/USN-1663-1"
    }
  ],
  "schema_version": "1.4.0",
  "severity": [],
  "summary": "OpenStack Nova Information leak in libvirt LVM-backed instances"
}

GSD-2012-5625

Vulnerability from gsd - Updated: 2023-12-13 01:20

Details

Aliases

CVE-2012-5625

Aliases

CVE-2012-5625

JSON

To clipboard

{
  "GSD": {
    "alias": "CVE-2012-5625",
    "description": "OpenStack Compute (Nova) Folsom before 2012.2.2 and Grizzly, when using libvirt and LVM backed instances, does not properly clear physical volume (PV) content when reallocating for instances, which allows attackers to obtain sensitive information by reading the memory of the previous logical volume (LV).",
    "id": "GSD-2012-5625",
    "references": [
      "https://www.suse.com/security/cve/CVE-2012-5625.html",
      "https://access.redhat.com/errata/RHSA-2013:0208"
    ]
  },
  "gsd": {
    "metadata": {
      "exploitCode": "unknown",
      "remediation": "unknown",
      "reportConfidence": "confirmed",
      "type": "vulnerability"
    },
    "osvSchema": {
      "aliases": [
        "CVE-2012-5625"
      ],
      "details": "OpenStack Compute (Nova) Folsom before 2012.2.2 and Grizzly, when using libvirt and LVM backed instances, does not properly clear physical volume (PV) content when reallocating for instances, which allows attackers to obtain sensitive information by reading the memory of the previous logical volume (LV).",
      "id": "GSD-2012-5625",
      "modified": "2023-12-13T01:20:19.093264Z",
      "schema_version": "1.4.0"
    }
  },
  "namespaces": {
    "cve.org": {
      "CVE_data_meta": {
        "ASSIGNER": "secalert@redhat.com",
        "ID": "CVE-2012-5625",
        "STATE": "PUBLIC"
      },
      "affects": {
        "vendor": {
          "vendor_data": [
            {
              "product": {
                "product_data": [
                  {
                    "product_name": "n/a",
                    "version": {
                      "version_data": [
                        {
                          "version_affected": "=",
                          "version_value": "n/a"
                        }
                      ]
                    }
                  }
                ]
              },
              "vendor_name": "n/a"
            }
          ]
        }
      },
      "data_format": "MITRE",
      "data_type": "CVE",
      "data_version": "4.0",
      "description": {
        "description_data": [
          {
            "lang": "eng",
            "value": "OpenStack Compute (Nova) Folsom before 2012.2.2 and Grizzly, when using libvirt and LVM backed instances, does not properly clear physical volume (PV) content when reallocating for instances, which allows attackers to obtain sensitive information by reading the memory of the previous logical volume (LV)."
          }
        ]
      },
      "problemtype": {
        "problemtype_data": [
          {
            "description": [
              {
                "lang": "eng",
                "value": "n/a"
              }
            ]
          }
        ]
      },
      "references": {
        "reference_data": [
          {
            "name": "http://osvdb.org/88419",
            "refsource": "MISC",
            "url": "http://osvdb.org/88419"
          },
          {
            "name": "http://rhn.redhat.com/errata/RHSA-2013-0208.html",
            "refsource": "MISC",
            "url": "http://rhn.redhat.com/errata/RHSA-2013-0208.html"
          },
          {
            "name": "http://www.openwall.com/lists/oss-security/2012/12/11/5",
            "refsource": "MISC",
            "url": "http://www.openwall.com/lists/oss-security/2012/12/11/5"
          },
          {
            "name": "http://www.securityfocus.com/bid/56904",
            "refsource": "MISC",
            "url": "http://www.securityfocus.com/bid/56904"
          },
          {
            "name": "http://www.ubuntu.com/usn/USN-1663-1",
            "refsource": "MISC",
            "url": "http://www.ubuntu.com/usn/USN-1663-1"
          },
          {
            "name": "https://bugs.launchpad.net/nova/+bug/1070539",
            "refsource": "MISC",
            "url": "https://bugs.launchpad.net/nova/+bug/1070539"
          },
          {
            "name": "https://github.com/openstack/nova/commit/9d2ea970422591f8cdc394001be9a2deca499a5f",
            "refsource": "MISC",
            "url": "https://github.com/openstack/nova/commit/9d2ea970422591f8cdc394001be9a2deca499a5f"
          },
          {
            "name": "https://github.com/openstack/nova/commit/a99a802e008eed18e39fc1d98170edc495cbd354",
            "refsource": "MISC",
            "url": "https://github.com/openstack/nova/commit/a99a802e008eed18e39fc1d98170edc495cbd354"
          },
          {
            "name": "https://launchpad.net/nova/folsom/2012.2.2",
            "refsource": "MISC",
            "url": "https://launchpad.net/nova/folsom/2012.2.2"
          },
          {
            "name": "https://bugzilla.redhat.com/show_bug.cgi?id=884293",
            "refsource": "MISC",
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=884293"
          }
        ]
      }
    },
    "nvd.nist.gov": {
      "configurations": {
        "CVE_data_version": "4.0",
        "nodes": [
          {
            "children": [],
            "cpe_match": [
              {
                "cpe23Uri": "cpe:2.3:a:openstack:folsom:2012.2:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:openstack:grizzly:-:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              }
            ],
            "operator": "OR"
          }
        ]
      },
      "cve": {
        "CVE_data_meta": {
          "ASSIGNER": "secalert@redhat.com",
          "ID": "CVE-2012-5625"
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "en",
              "value": "OpenStack Compute (Nova) Folsom before 2012.2.2 and Grizzly, when using libvirt and LVM backed instances, does not properly clear physical volume (PV) content when reallocating for instances, which allows attackers to obtain sensitive information by reading the memory of the previous logical volume (LV)."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "en",
                  "value": "CWE-200"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://github.com/openstack/nova/commit/a99a802e008eed18e39fc1d98170edc495cbd354",
              "refsource": "CONFIRM",
              "tags": [
                "Patch"
              ],
              "url": "https://github.com/openstack/nova/commit/a99a802e008eed18e39fc1d98170edc495cbd354"
            },
            {
              "name": "USN-1663-1",
              "refsource": "UBUNTU",
              "tags": [
                "Patch"
              ],
              "url": "http://www.ubuntu.com/usn/USN-1663-1"
            },
            {
              "name": "https://github.com/openstack/nova/commit/9d2ea970422591f8cdc394001be9a2deca499a5f",
              "refsource": "CONFIRM",
              "tags": [
                "Patch"
              ],
              "url": "https://github.com/openstack/nova/commit/9d2ea970422591f8cdc394001be9a2deca499a5f"
            },
            {
              "name": "https://launchpad.net/nova/folsom/2012.2.2",
              "refsource": "CONFIRM",
              "tags": [],
              "url": "https://launchpad.net/nova/folsom/2012.2.2"
            },
            {
              "name": "88419",
              "refsource": "OSVDB",
              "tags": [],
              "url": "http://osvdb.org/88419"
            },
            {
              "name": "56904",
              "refsource": "BID",
              "tags": [],
              "url": "http://www.securityfocus.com/bid/56904"
            },
            {
              "name": "[oss-security] 20121211 [OSSA 2012-020] Information leak in libvirt LVM-backed instances (CVE-2012-5625)",
              "refsource": "MLIST",
              "tags": [],
              "url": "http://www.openwall.com/lists/oss-security/2012/12/11/5"
            },
            {
              "name": "https://bugs.launchpad.net/nova/+bug/1070539",
              "refsource": "CONFIRM",
              "tags": [],
              "url": "https://bugs.launchpad.net/nova/+bug/1070539"
            },
            {
              "name": "https://bugzilla.redhat.com/show_bug.cgi?id=884293",
              "refsource": "MISC",
              "tags": [],
              "url": "https://bugzilla.redhat.com/show_bug.cgi?id=884293"
            },
            {
              "name": "RHSA-2013:0208",
              "refsource": "REDHAT",
              "tags": [],
              "url": "http://rhn.redhat.com/errata/RHSA-2013-0208.html"
            }
          ]
        }
      },
      "impact": {
        "baseMetricV2": {
          "cvssV2": {
            "accessComplexity": "MEDIUM",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "availabilityImpact": "NONE",
            "baseScore": 4.3,
            "confidentialityImpact": "PARTIAL",
            "integrityImpact": "NONE",
            "vectorString": "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "version": "2.0"
          },
          "exploitabilityScore": 8.6,
          "impactScore": 2.9,
          "obtainAllPrivilege": false,
          "obtainOtherPrivilege": false,
          "obtainUserPrivilege": false,
          "severity": "MEDIUM",
          "userInteractionRequired": false
        }
      },
      "lastModifiedDate": "2013-02-15T05:04Z",
      "publishedDate": "2012-12-26T22:55Z"
    }
  }
}

PYSEC-2012-41

Vulnerability from pysec - Published: 2012-12-26 22:55 - Updated: 2026-05-21 14:54

Withdrawn 2024-11-22

Details

Impacted products

Name	purl
nova	pkg:pypi/nova

Aliases

CVE-2012-5625

JSON

To clipboard

{
  "affected": [
    {
      "package": {
        "ecosystem": "PyPI",
        "name": "nova",
        "purl": "pkg:pypi/nova"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "a99a802e008eed18e39fc1d98170edc495cbd354"
            },
            {
              "fixed": "9d2ea970422591f8cdc394001be9a2deca499a5f"
            }
          ],
          "repo": "https://github.com/openstack/nova",
          "type": "GIT"
        },
        {
          "events": [
            {
              "introduced": "0"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "15.1.5",
        "16.1.6",
        "16.1.7",
        "16.1.8",
        "17.0.10",
        "17.0.11",
        "17.0.12",
        "17.0.13",
        "17.0.7",
        "17.0.8",
        "17.0.9",
        "18.0.2",
        "18.0.3",
        "18.1.0",
        "18.2.0",
        "18.2.1",
        "18.2.2",
        "18.2.3",
        "18.3.0",
        "19.0.0",
        "19.0.0.0rc1",
        "19.0.0.0rc2",
        "19.0.1",
        "19.0.2",
        "19.0.3",
        "19.1.0",
        "19.2.0",
        "19.3.0",
        "19.3.1",
        "19.3.2",
        "20.0.0",
        "20.0.0.0rc1",
        "20.0.0.0rc2",
        "20.0.1",
        "20.1.0",
        "20.1.1",
        "20.2.0",
        "20.3.0",
        "20.4.0",
        "20.4.1",
        "20.5.0",
        "20.6.0",
        "20.6.1",
        "21.0.0",
        "21.0.0.0rc1",
        "21.0.0.0rc2",
        "21.1.0",
        "21.1.1",
        "21.1.2",
        "21.2.0",
        "21.2.1",
        "21.2.2",
        "21.2.3",
        "21.2.4",
        "22.0.0",
        "22.0.0.0rc1",
        "22.0.1",
        "22.1.0",
        "22.2.0",
        "22.2.1",
        "22.2.2",
        "22.3.0",
        "22.4.0",
        "23.0.0",
        "23.0.0.0rc1",
        "23.0.0.0rc2",
        "23.0.1",
        "23.0.2",
        "23.1.0",
        "23.2.0",
        "23.2.1",
        "23.2.2",
        "24.0.0",
        "24.0.0.0rc1",
        "24.0.0.0rc2",
        "24.1.0",
        "24.1.1",
        "24.2.0",
        "24.2.1",
        "25.0.0",
        "25.0.0.0rc1",
        "25.0.1",
        "25.1.0",
        "25.1.1",
        "25.2.0",
        "25.2.1",
        "25.3.0",
        "26.0.0",
        "26.0.0.0rc1",
        "26.0.0.0rc2",
        "26.1.0",
        "26.1.1",
        "26.2.0",
        "26.2.1",
        "26.2.2",
        "26.3.0",
        "27.0.0",
        "27.0.0.0rc1",
        "27.1.0",
        "27.2.0",
        "27.3.0",
        "27.4.0",
        "27.5.0",
        "27.5.1",
        "28.0.0",
        "28.0.0.0rc1",
        "28.0.1",
        "28.1.0",
        "28.2.0",
        "28.3.0",
        "29.0.0",
        "29.0.0.0rc1",
        "29.0.1",
        "29.0.2",
        "29.1.0",
        "29.2.0",
        "30.0.0",
        "30.0.0.0rc1",
        "28.3.1",
        "29.2.1",
        "29.2.2",
        "29.3.0",
        "29.4.0",
        "30.1.0",
        "30.2.0",
        "30.2.1",
        "30.3.0",
        "31.0.0",
        "31.0.0.0rc1",
        "31.0.1",
        "31.1.0",
        "31.2.0",
        "31.3.0",
        "32.0.0",
        "32.0.0.0rc1",
        "32.1.0",
        "32.2.0",
        "33.0.0",
        "33.0.0.0rc1",
        "33.0.1"
      ]
    }
  ],
  "aliases": [
    "CVE-2012-5625"
  ],
  "details": "OpenStack Compute (Nova) Folsom before 2012.2.2 and Grizzly, when using libvirt and LVM backed instances, does not properly clear physical volume (PV) content when reallocating for instances, which allows attackers to obtain sensitive information by reading the memory of the previous logical volume (LV).",
  "id": "PYSEC-2012-41",
  "modified": "2026-05-21T14:54:36.200646Z",
  "published": "2012-12-26T22:55:00Z",
  "references": [
    {
      "type": "FIX",
      "url": "https://github.com/openstack/nova/commit/a99a802e008eed18e39fc1d98170edc495cbd354"
    },
    {
      "type": "FIX",
      "url": "http://www.ubuntu.com/usn/USN-1663-1"
    },
    {
      "type": "FIX",
      "url": "https://github.com/openstack/nova/commit/9d2ea970422591f8cdc394001be9a2deca499a5f"
    },
    {
      "type": "WEB",
      "url": "https://launchpad.net/nova/folsom/2012.2.2"
    },
    {
      "type": "WEB",
      "url": "http://osvdb.org/88419"
    },
    {
      "type": "WEB",
      "url": "http://www.openwall.com/lists/oss-security/2012/12/11/5"
    },
    {
      "type": "WEB",
      "url": "https://bugs.launchpad.net/nova/+bug/1070539"
    },
    {
      "type": "REPORT",
      "url": "https://bugzilla.redhat.com/show_bug.cgi?id=884293"
    },
    {
      "type": "ADVISORY",
      "url": "http://rhn.redhat.com/errata/RHSA-2013-0208.html"
    }
  ],
  "withdrawn": "2024-11-22T04:37:04Z"
}

PYSEC-2012-42

Vulnerability from pysec - Published: 2012-12-26 22:55 - Updated: 2026-04-29 01:13

Details

Impacted products

Name	purl
nova	pkg:pypi/nova

Aliases

JSON

To clipboard

{
  "affected": [
    {
      "package": {
        "ecosystem": "PyPI",
        "name": "nova",
        "purl": "pkg:pypi/nova"
      }
    }
  ],
  "aliases": [
    "CVE-2012-5625",
    "GHSA-rwhr-h69g-8qmq"
  ],
  "details": "OpenStack Compute (Nova) Folsom before 2012.2.2 and Grizzly, when using libvirt and LVM backed instances, does not properly clear physical volume (PV) content when reallocating for instances, which allows attackers to obtain sensitive information by reading the memory of the previous logical volume (LV).",
  "id": "PYSEC-2012-42",
  "modified": "2026-04-29T01:13:23.040Z",
  "published": "2012-12-26T22:55:03.783Z",
  "references": [
    {
      "type": "WEB",
      "url": "http://osvdb.org/88419"
    },
    {
      "type": "WEB",
      "url": "http://www.openwall.com/lists/oss-security/2012/12/11/5"
    },
    {
      "type": "WEB",
      "url": "http://www.securityfocus.com/bid/56904"
    },
    {
      "type": "WEB",
      "url": "https://bugs.launchpad.net/nova/+bug/1070539"
    },
    {
      "type": "WEB",
      "url": "https://launchpad.net/nova/folsom/2012.2.2"
    },
    {
      "type": "ADVISORY",
      "url": "http://rhn.redhat.com/errata/RHSA-2013-0208.html"
    },
    {
      "type": "REPORT",
      "url": "https://bugzilla.redhat.com/show_bug.cgi?id=884293"
    },
    {
      "type": "FIX",
      "url": "http://www.ubuntu.com/usn/USN-1663-1"
    },
    {
      "type": "FIX",
      "url": "https://github.com/openstack/nova/commit/9d2ea970422591f8cdc394001be9a2deca499a5f"
    },
    {
      "type": "FIX",
      "url": "https://github.com/openstack/nova/commit/a99a802e008eed18e39fc1d98170edc495cbd354"
    },
    {
      "type": "ADVISORY",
      "url": "https://github.com/advisories/GHSA-rwhr-h69g-8qmq"
    }
  ]
}

RHSA-2013:0208

Vulnerability from csaf_redhat - Published: 2013-01-30 20:59 - Updated: 2026-10-30 19:02

Summary

Red Hat Security Advisory: openstack-nova security and bug fix update

Severity

Important

Scope

2 vulnerabilities in this advisory, including CVE-2012-5625.

CVE-2012-5625

6.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N

Fixed: 13 products

https://access.redhat.com/errata/RHSA-2013:0208

Open the full advisory

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Vulnerability timeline

Sightings and recorded dates, grouped by day · UTC

Order JSON

Publication & reservation Sightings KEV catalogs Other timestamps

Loading timeline…

The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base model, served locally by ML-Gateway. They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.

Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.

Action not permitted

CVE-2012-5625 (GCVE-0-2012-5625)

FKIE_CVE-2012-5625

GHSA-RWHR-H69G-8QMQ

GSD-2012-5625

PYSEC-2012-41

PYSEC-2012-42

RHSA-2013:0208

Tags

Sightings

Nomenclature

Vulnerability timeline

Related by attack behaviour