CVE-2012-5625
mediumOpenStack Compute (Nova) Folsom before 2012.2.2 and Grizzly, when using libvirt and LVM backed instances, does not properly clear physical volume (PV) content…
Vendor / product: Openstack — folsom
OpenStack Compute (Nova) Folsom before 2012.2.2 and Grizzly, when using libvirt and LVM backed instances, does not properly clear physical volume (PV) content when reallocating for instances, which allows attackers to obtain sensitive information by reading the memory of the previous logical volume (LV).
CVSS
6.5
6.5 (CVSS v3.1)
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N Severity source: NVD CVSS v3.1 (secalert@redhat.com)
Timeline (UTC)
Published: 2012-12-26 22:55
Modified: 2026-10-30 19:17
NVD status: Modified
Last synced 18 hours ago
Verified against the source API 2026-10-30 19:20 UTC
Exploitation
Not listed in CISA KEV (as of last catalog sync)
Absence from KEV does not mean a CVE is not exploited. Exploitation status: unknown (no authoritative evidence in our sources).
Affected products
openstack / folsom 2012.2
openstack / grizzly all versions
Weakness classification (CWE)
Source: NVD / CISA. “NVD-CWE-Other” and “NVD-CWE-noinfo” mean NVD could not assign a specific weakness.
Mitigation & advisories
Patch / mitigation: http://www.ubuntu.com/usn/USN-1663-1
Patch / mitigation: https://github.com/openstack/nova/commit/9d2ea970422591f8cdc394001be9a2deca499a5f
Patch / mitigation: https://github.com/openstack/nova/commit/a99a802e008eed18e39fc1d98170edc495cbd354
Patch / mitigation: http://www.ubuntu.com/usn/USN-1663-1
References
- http://osvdb.org/88419 secalert@redhat.com
- http://rhn.redhat.com/errata/RHSA-2013-0208.html secalert@redhat.com
- http://www.openwall.com/lists/oss-security/2012/12/11/5 secalert@redhat.com
- http://www.securityfocus.com/bid/56904 secalert@redhat.com
- http://www.ubuntu.com/usn/USN-1663-1 secalert@redhat.com
- https://access.redhat.com/errata/RHSA-2013:0208 secalert@redhat.com
- https://access.redhat.com/security/cve/CVE-2012-5625 secalert@redhat.com
- https://bugs.launchpad.net/nova/+bug/1070539 secalert@redhat.com
- https://bugzilla.redhat.com/show_bug.cgi?id=884293 secalert@redhat.com
- https://github.com/openstack/nova/commit/9d2ea970422591f8cdc394001be9a2deca499a5f secalert@redhat.com
- https://github.com/openstack/nova/commit/a99a802e008eed18e39fc1d98170edc495cbd354 secalert@redhat.com
- https://launchpad.net/nova/folsom/2012.2.2 secalert@redhat.com
- http://osvdb.org/88419 af854a3a-2127-422b-91ae-364da2661108
- http://rhn.redhat.com/errata/RHSA-2013-0208.html af854a3a-2127-422b-91ae-364da2661108
- http://www.openwall.com/lists/oss-security/2012/12/11/5 af854a3a-2127-422b-91ae-364da2661108
- http://www.securityfocus.com/bid/56904 af854a3a-2127-422b-91ae-364da2661108
- http://www.ubuntu.com/usn/USN-1663-1 af854a3a-2127-422b-91ae-364da2661108
- https://bugs.launchpad.net/nova/+bug/1070539 af854a3a-2127-422b-91ae-364da2661108
- https://bugzilla.redhat.com/show_bug.cgi?id=884293 af854a3a-2127-422b-91ae-364da2661108
- https://github.com/openstack/nova/commit/9d2ea970422591f8cdc394001be9a2deca499a5f af854a3a-2127-422b-91ae-364da2661108
- https://github.com/openstack/nova/commit/a99a802e008eed18e39fc1d98170edc495cbd354 af854a3a-2127-422b-91ae-364da2661108
- https://launchpad.net/nova/folsom/2012.2.2 af854a3a-2127-422b-91ae-364da2661108
Data sources
NVD CVE API 2.0 — fetched 2026-10-30 19:20 UTC · record ↗