Unscored severity · published Dec 26, 2012
CVE-2012-5625
OpenStack Compute (Nova) Folsom before 2012.2.2 and Grizzly, when using libvirt and LVM backed instances, does not properly clear physical volume (PV) content when reallocating…
–
CVSS
2%
EPSS
No
On KEV
Description
OpenStack Compute (Nova) Folsom before 2012.2.2 and Grizzly, when using libvirt and LVM backed instances, does not properly clear physical volume (PV) content when reallocating for instances, which allows attackers to obtain sensitive information by reading the memory of the previous logical volume (LV).
Exploitation
Is it being used?
Exploit prediction (EPSS)2.0% · higher than 81% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
FO
Folsom · Openstack
2012.2 · source: NVD
GR
Grizzly · Openstack
All versions, or not specified · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2012-5625
CVE.org
https://www.cve.org/CVERecord?id=CVE-2012-5625
osvdb.org
http://osvdb.org/88419
rhn.redhat.com
http://rhn.redhat.com/errata/RHSA-2013-0208.html
www.openwall.com
http://www.openwall.com/lists/oss-security/2012/12/11/5
www.securityfocus.com
http://www.securityfocus.com/bid/56904
Patch
http://www.ubuntu.com/usn/USN-1663-1
bugs.launchpad.net
https://bugs.launchpad.net/nova/+bug/1070539
More from Folsom
8.8
CVE-2013-0261
A flaw was found in PackStack
7.6
CVE-2013-0335
OpenStack Compute (Nova) Grizzly, Folsom (2012.2), and Essex (2012.1) allows remote authenticated users to gain access to a VM in opportunistic circumstances by using the VNC…
5.5
CVE-2013-0266
A flaw was found in the `puppetlabs-cinder` module, as used in PackStack
5.4
CVE-2012-5571
A flaw was found in OpenStack Keystone
–
CVE-2013-4463
OpenStack Compute (Nova) Folsom, Grizzly, and Havana does not properly verify the virtual size of a QCOW2 image, which allows local users to cause a denial of service (host file…