CVE-2012-5625 OpenStack Nova Information leak in libvirt LVM-backed instances
Attackers can read sensitive data from previous logical volumes in OpenStack Compute when using libvirt and LVM, requiring local access.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2012-5625?
CVE-2012-5625 is a medium-severity vulnerability in n/a, published on 26 Dec 2012. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
OpenStack Compute (Nova) Folsom before 2012.2.2 and Grizzly, when using libvirt and LVM backed instances, does not properly clear physical volume (PV) content when reallocating for instances, which allows attackers to obtain sensitive information by reading the memory of the previous logical volume (LV).
Weakness: CWE-200
Which versions are affected by CVE-2012-5625?
3 open source packages ship an affected version, including nova. It affects 2 products.
| Package | Affected | Fixed in |
|---|---|---|
nova PyPI | All versions | None |
nova PyPI | All versions | 12.0.0a0 |
nova PyPI | All versions | 12.0.0a0 |
Products include Openstack Folsom, Openstack Grizzly.
How do I fix CVE-2012-5625?
Upgrade nova to 12.0.0a0 or later.
Is CVE-2012-5625 being exploited?
There is no known exploitation of CVE-2012-5625 in the wild and no public exploit code.
Other vulnerabilities in n/a
- CVE-2013-2161 OpenStack Swift Unchecked user input in XML responses
- CVE-2013-4497 OpenStack Compute Nova Improper Access Control
- CVE-2013-1665 XML External Entity (XXE) in Django
- CVE-2012-3447 Arbitrary file overwrite in OpenStack Nova
- CVE-2013-4155 OpenStack Swift allows authenticated users to cause a denial of service
Sources
Also known as GHSA-rwhr-h69g-8qmq, PYSEC-2012-42.