Openstack nova: information leak in libvirt lvm-backed instances
Priority LOW 32CWE-212Published · Updated
Key facts
- Attack vector
- Local
- Privileges required
- Low
- User interaction
- None
- Attack complexity
- Low
- Impact type
- Information disclosure
- Confidentiality · integrity · availability
- High · None · None
- Fix status
- Fixed
Attack profile from CVSS 3.1 · CNA. Fix status from CNA, GitHub and Red Hat. Impact type from CWE-200.
Summary
OpenStack Compute (Nova) Folsom before 2012.2.2 and Grizzly, when using libvirt and LVM backed instances, does not properly clear physical volume (PV) content when reallocating for instances, which allows attackers to obtain sensitive information by reading the memory of the previous logical volume (LV).
Why it matters now
EPSS 0.01339 71st percentileScored 2026-11-07
Fix Fixed nova (PyPI): 12.0.0a0Red Hat: 1 advisory
SSVC decision points
Not available: CISA has not published SSVC decision points for this record.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| Red Hat | OpenStack Folsom for RHEL 6 | — | 2012.2.2-8.el6ost | Patch available | CNA |
| Red Hat | Red Hat OpenStack Platform 16.2 | — | — | Not affected | CNA |
| Red Hat | Red Hat OpenStack Platform 17.1 | — | — | Not affected | CNA |
| Red Hat | Red Hat OpenStack Platform 18.0 | — | — | Not affected | CNA |
| — | nova (PyPI) | before 12.0.0a0 | 12.0.0a0 | Patch available | GHSA-rwhr-h69g-8qmq |
- OpenStack Folsom for RHEL 6 VendorRed Hat Affected — Fixed in 2012.2.2-8.el6ost Patch available CNA
- Red Hat OpenStack Platform 16.2 VendorRed Hat Affected — Fixed in — Not affected CNA
- Red Hat OpenStack Platform 17.1 VendorRed Hat Affected — Fixed in — Not affected CNA
- Red Hat OpenStack Platform 18.0 VendorRed Hat Affected — Fixed in — Not affected CNA
- nova (PyPI) Vendor— Affected before 12.0.0a0 Fixed in 12.0.0a0 Patch available GHSA-rwhr-h69g-8qmq
Remediation
- Fix · GHSA-rwhr-h69g-8qmq nova (PyPI) Fixed in 12.0.0a0 Advisory →
Red Hat 1 advisory
- RHSA-2013:0208 Released 2013-01-30 · Red Hat rating Importantopenstack-nova security and bug fix update
- OpenStack Folsom openstack-nova-2012.2.2-8.el6ost, openstack-nova-api-2012.2.2-8.el6ost, openstack-nova-cert-2012.2.2-8.el6ost +9
Vendor assessments
Red Hat
Red Hat rating: Moderate. Red Hat's page for this CVE →
| Product | Status | Plan or fix |
|---|---|---|
| OpenStack Folsom | Fixed | RHSA-2013:0208 |
Not affected: 3 products
- Red Hat OpenStack Platform 16.2
- Red Hat OpenStack Platform 17.1
- Red Hat OpenStack Platform 18.0
Timeline
- 2026-10-02 Threatist record created from CVE-2012-5625
- 2026-10-03 Alias added: GHSA-rwhr-h69g-8qmq
- 2026-10-30 Title updated · CNA
- 2026-10-30 CVSS score added · CNA
- 2026-10-30 Weakness changed · CNA
- 2026-10-30 Fix available: openstack-nova@0:2012.2.2-8.el6ost · CNA
- 2026-10-30 2 new references · CNA
- 2026-10-30 Fix available: RHSA-2013:0208 · Red Hat
- 2026-10-30 Fix available: OpenStack Folsom · Red Hat
References
Patch 3
Other 10
- http://osvdb.org/88419
- http://rhn.redhat.com/errata/RHSA-2013-0208.html
- http://www.openwall.com/lists/oss-security/2012/12/11/5
- https://access.redhat.com/security/cve/CVE-2012-5625
- https://bugs.launchpad.net/nova/+bug/1070539
- https://bugzilla.redhat.com/show_bug.cgi?id=884293
- https://launchpad.net/nova/folsom/2012.2.2
- https://github.com/openstack/nova
- https://github.com/pypa/advisory-database/tree/main/vulns/nova/PYSEC-2012-41.yaml
- https://github.com/pypa/advisory-database/tree/main/vulns/nova/PYSEC-2012-42.yaml
More Red Hat vulnerabilities
- TI-2019-15875 Protection mechanism failure in Jenkins Pipeline: Groovy Plugin KEVCVSS 3.1CRITICAL 9.9
- TI-2019-15874 Protection mechanism failure in Jenkins Script Security Plugin KEVCVSS 3.1CRITICAL 9.9
- TI-2019-08259 Underflow in PHP-FPM can lead to RCE KEVCVSS 3.1CRITICAL 9.8
- TI-2019-05363 Code injection in Elastic Kibana KEVCVSS 3.1CRITICAL 10.0
- TI-2019-03949 Out-of-bounds write in ESXi and Horizon DaaS KEVCVSS 3.1CRITICAL 9.8
- TI-2018-16080 A code execution vulnerability exists in the Stapler web framework used by Jenkins 2.153… KEVCVSS 3.1CRITICAL 9.8
Sources
- CVE-2012-5625 · CVE Program
- CVE-2012-5625 · NVD
- FIRST EPSS
- GHSA-rwhr-h69g-8qmq · GitHub Advisory Database · CC BY 4.0
- CVE-2012-5625 · Red Hat security data · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences