CVE-2012-5625 Openstack nova: information leak in libvirt lvm-backed instances
MediumCVSS 6.5
EPSS 1.3%
- Published
- Updated
- Exploit status
- No public exploit known
Description
OpenStack Compute (Nova) Folsom before 2012.2.2 and Grizzly, when using libvirt and LVM backed instances, does not properly clear physical volume (PV) content when reallocating for instances, which allows attackers to obtain sensitive information by reading the memory of the previous logical volume (LV).
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| pypi nova(PyPI) | < 12.0.0a0 | 12.0.0a0 |
| pypi nova(PyPI) | All versions | No fix listed |
| pypi nova(PyPI) | = 15.1.5 | No fix listed |
| pypi nova(PyPI) | = 16.1.6 | No fix listed |
| pypi nova(PyPI) | = 16.1.7 | No fix listed |
| pypi nova(PyPI) | = 16.1.8 | No fix listed |
| pypi nova(PyPI) | = 17.0.10 | No fix listed |
| pypi nova(PyPI) | = 17.0.11 | No fix listed |
| pypi nova(PyPI) | = 17.0.12 | No fix listed |
| pypi nova(PyPI) | = 17.0.13 | No fix listed |
| pypi nova(PyPI) | = 17.0.7 | No fix listed |
| pypi nova(PyPI) | = 17.0.8 | No fix listed |
| pypi nova(PyPI) | = 17.0.9 | No fix listed |
| pypi nova(PyPI) | = 18.0.2 | No fix listed |
| pypi nova(PyPI) | = 18.0.3 | No fix listed |
| pypi nova(PyPI) | = 18.1.0 | No fix listed |
| pypi nova(PyPI) | = 18.2.0 | No fix listed |
| pypi nova(PyPI) | = 18.2.1 | No fix listed |
| pypi nova(PyPI) | = 18.2.2 | No fix listed |
| pypi nova(PyPI) | = 18.2.3 | No fix listed |
| pypi nova(PyPI) | = 18.3.0 | No fix listed |
| pypi nova(PyPI) | = 19.0.0 | No fix listed |
| pypi nova(PyPI) | = 19.0.0.0rc1 | No fix listed |
| pypi nova(PyPI) | = 19.0.0.0rc2 | No fix listed |
| pypi nova(PyPI) | = 19.0.1 | No fix listed |
Show 139 more
| Product | Affected versions | Fixed in |
|---|---|---|
| pypi nova(PyPI) | = 19.0.2 | No fix listed |
| pypi nova(PyPI) | = 19.0.3 | No fix listed |
| pypi nova(PyPI) | = 19.1.0 | No fix listed |
| pypi nova(PyPI) | = 19.2.0 | No fix listed |
| pypi nova(PyPI) | = 19.3.0 | No fix listed |
| pypi nova(PyPI) | = 19.3.1 | No fix listed |
| pypi nova(PyPI) | = 19.3.2 | No fix listed |
| pypi nova(PyPI) | = 20.0.0 | No fix listed |
| pypi nova(PyPI) | = 20.0.0.0rc1 | No fix listed |
| pypi nova(PyPI) | = 20.0.0.0rc2 | No fix listed |
| pypi nova(PyPI) | = 20.0.1 | No fix listed |
| pypi nova(PyPI) | = 20.1.0 | No fix listed |
| pypi nova(PyPI) | = 20.1.1 | No fix listed |
| pypi nova(PyPI) | = 20.2.0 | No fix listed |
| pypi nova(PyPI) | = 20.3.0 | No fix listed |
| pypi nova(PyPI) | = 20.4.0 | No fix listed |
| pypi nova(PyPI) | = 20.4.1 | No fix listed |
| pypi nova(PyPI) | = 20.5.0 | No fix listed |
| pypi nova(PyPI) | = 20.6.0 | No fix listed |
| pypi nova(PyPI) | = 20.6.1 | No fix listed |
| pypi nova(PyPI) | = 21.0.0 | No fix listed |
| pypi nova(PyPI) | = 21.0.0.0rc1 | No fix listed |
| pypi nova(PyPI) | = 21.0.0.0rc2 | No fix listed |
| pypi nova(PyPI) | = 21.1.0 | No fix listed |
| pypi nova(PyPI) | = 21.1.1 | No fix listed |
| pypi nova(PyPI) | = 21.1.2 | No fix listed |
| pypi nova(PyPI) | = 21.2.0 | No fix listed |
| pypi nova(PyPI) | = 21.2.1 | No fix listed |
| pypi nova(PyPI) | = 21.2.2 | No fix listed |
| pypi nova(PyPI) | = 21.2.3 | No fix listed |
| pypi nova(PyPI) | = 21.2.4 | No fix listed |
| pypi nova(PyPI) | = 22.0.0 | No fix listed |
| pypi nova(PyPI) | = 22.0.0.0rc1 | No fix listed |
| pypi nova(PyPI) | = 22.0.1 | No fix listed |
| pypi nova(PyPI) | = 22.1.0 | No fix listed |
| pypi nova(PyPI) | = 22.2.0 | No fix listed |
| pypi nova(PyPI) | = 22.2.1 | No fix listed |
| pypi nova(PyPI) | = 22.2.2 | No fix listed |
| pypi nova(PyPI) | = 22.3.0 | No fix listed |
| pypi nova(PyPI) | = 22.4.0 | No fix listed |
| pypi nova(PyPI) | = 23.0.0 | No fix listed |
| pypi nova(PyPI) | = 23.0.0.0rc1 | No fix listed |
| pypi nova(PyPI) | = 23.0.0.0rc2 | No fix listed |
| pypi nova(PyPI) | = 23.0.1 | No fix listed |
| pypi nova(PyPI) | = 23.0.2 | No fix listed |
| pypi nova(PyPI) | = 23.1.0 | No fix listed |
| pypi nova(PyPI) | = 23.2.0 | No fix listed |
| pypi nova(PyPI) | = 23.2.1 | No fix listed |
| pypi nova(PyPI) | = 23.2.2 | No fix listed |
| pypi nova(PyPI) | = 24.0.0 | No fix listed |
| pypi nova(PyPI) | = 24.0.0.0rc1 | No fix listed |
| pypi nova(PyPI) | = 24.0.0.0rc2 | No fix listed |
| pypi nova(PyPI) | = 24.1.0 | No fix listed |
| pypi nova(PyPI) | = 24.1.1 | No fix listed |
| pypi nova(PyPI) | = 24.2.0 | No fix listed |
| pypi nova(PyPI) | = 24.2.1 | No fix listed |
| pypi nova(PyPI) | = 25.0.0 | No fix listed |
| pypi nova(PyPI) | = 25.0.0.0rc1 | No fix listed |
| pypi nova(PyPI) | = 25.0.1 | No fix listed |
| pypi nova(PyPI) | = 25.1.0 | No fix listed |
| pypi nova(PyPI) | = 25.1.1 | No fix listed |
| pypi nova(PyPI) | = 25.2.0 | No fix listed |
| pypi nova(PyPI) | = 25.2.1 | No fix listed |
| pypi nova(PyPI) | = 25.3.0 | No fix listed |
| pypi nova(PyPI) | = 26.0.0 | No fix listed |
| pypi nova(PyPI) | = 26.0.0.0rc1 | No fix listed |
| pypi nova(PyPI) | = 26.0.0.0rc2 | No fix listed |
| pypi nova(PyPI) | = 26.1.0 | No fix listed |
| pypi nova(PyPI) | = 26.1.1 | No fix listed |
| pypi nova(PyPI) | = 26.2.0 | No fix listed |
| pypi nova(PyPI) | = 26.2.1 | No fix listed |
| pypi nova(PyPI) | = 26.2.2 | No fix listed |
| pypi nova(PyPI) | = 26.3.0 | No fix listed |
| pypi nova(PyPI) | = 27.0.0 | No fix listed |
| pypi nova(PyPI) | = 27.0.0.0rc1 | No fix listed |
| pypi nova(PyPI) | = 27.1.0 | No fix listed |
| pypi nova(PyPI) | = 27.2.0 | No fix listed |
| pypi nova(PyPI) | = 27.3.0 | No fix listed |
| pypi nova(PyPI) | = 27.4.0 | No fix listed |
| pypi nova(PyPI) | = 27.5.0 | No fix listed |
| pypi nova(PyPI) | = 27.5.1 | No fix listed |
| pypi nova(PyPI) | = 28.0.0 | No fix listed |
| pypi nova(PyPI) | = 28.0.0.0rc1 | No fix listed |
| pypi nova(PyPI) | = 28.0.1 | No fix listed |
| pypi nova(PyPI) | = 28.1.0 | No fix listed |
| pypi nova(PyPI) | = 28.2.0 | No fix listed |
| pypi nova(PyPI) | = 28.3.0 | No fix listed |
| pypi nova(PyPI) | = 28.3.1 | No fix listed |
| pypi nova(PyPI) | = 29.0.0 | No fix listed |
| pypi nova(PyPI) | = 29.0.0.0rc1 | No fix listed |
| pypi nova(PyPI) | = 29.0.1 | No fix listed |
| pypi nova(PyPI) | = 29.0.2 | No fix listed |
| pypi nova(PyPI) | = 29.1.0 | No fix listed |
| pypi nova(PyPI) | = 29.2.0 | No fix listed |
| pypi nova(PyPI) | = 29.2.1 | No fix listed |
| pypi nova(PyPI) | = 29.2.2 | No fix listed |
| pypi nova(PyPI) | = 29.3.0 | No fix listed |
| pypi nova(PyPI) | = 29.4.0 | No fix listed |
| pypi nova(PyPI) | = 30.0.0 | No fix listed |
| pypi nova(PyPI) | = 30.0.0.0rc1 | No fix listed |
| pypi nova(PyPI) | = 30.1.0 | No fix listed |
| pypi nova(PyPI) | = 30.2.0 | No fix listed |
| pypi nova(PyPI) | = 30.2.1 | No fix listed |
| pypi nova(PyPI) | = 30.3.0 | No fix listed |
| pypi nova(PyPI) | = 31.0.0 | No fix listed |
| pypi nova(PyPI) | = 31.0.0.0rc1 | No fix listed |
| pypi nova(PyPI) | = 31.0.1 | No fix listed |
| pypi nova(PyPI) | = 31.1.0 | No fix listed |
| pypi nova(PyPI) | = 31.2.0 | No fix listed |
| pypi nova(PyPI) | = 31.3.0 | No fix listed |
| pypi nova(PyPI) | = 32.0.0 | No fix listed |
| pypi nova(PyPI) | = 32.0.0.0rc1 | No fix listed |
| pypi nova(PyPI) | = 32.1.0 | No fix listed |
| pypi nova(PyPI) | = 32.2.0 | No fix listed |
| pypi nova(PyPI) | = 33.0.0 | No fix listed |
| pypi nova(PyPI) | = 33.0.0.0rc1 | No fix listed |
| pypi nova(PyPI) | = 33.0.1 | No fix listed |
| pypi nova(PyPI) | = 2012.2.1 | No fix listed |
| pypi nova(PyPI) | = folsom-rc3 | No fix listed |
| pypi nova(PyPI) | = 2012.2 | No fix listed |
| pypi nova(PyPI) | = folsom-rc2 | No fix listed |
| pypi nova(PyPI) | = folsom-rc1 | No fix listed |
| pypi nova(PyPI) | = folsom-2 | No fix listed |
| pypi nova(PyPI) | = folsom-1 | No fix listed |
| pypi nova(PyPI) | = essex-1 | No fix listed |
| pypi nova(PyPI) | = diablo-1 | No fix listed |
| pypi nova(PyPI) | = 2011.2 | No fix listed |
| pypi nova(PyPI) | = 2011.2rc1 | No fix listed |
| pypi nova(PyPI) | = 2011.2gamma1 | No fix listed |
| pypi nova(PyPI) | = 2011.1rc1 | No fix listed |
| pypi nova(PyPI) | = 2011.1 | No fix listed |
| pypi nova(PyPI) | = 2010.1 | No fix listed |
| pypi nova(PyPI) | = 0.9.0 | No fix listed |
| redhat openstack | < 0:2012.2.2-8.el6ost | 0:2012.2.2-8.el6ost |
| redhat openstack | = 16.2 | No fix listed |
| redhat openstack | = 17.1 | No fix listed |
| redhat openstack | = 18.0 | No fix listed |
| OpenStack folsom | = 2012.2 | No fix listed |
| OpenStack grizzly | All versions | No fix listed |
References
- nvd.nist.gov third-party-advisory vendor-advisory
- github.com patch
- github.com patch
- bugs.launchpad.net
- bugzilla.redhat.com issue-tracking
- github.com product
- github.com
- github.com
- launchpad.net
- RHSA-2013:0208 vendor-advisory
- [oss-security] 20121211 [OSSA 2012-020] Information leak in libvirt LVM-backed instances (CVE-2012-5625) mailing-list
- USN-1663-1 patch vendor-advisory
- 88419 vdb-entry
- 56904 vdb-entry
- github.com vendor-advisory
- RHSA-2013:0208 vendor-advisory
- access.redhat.com vdb-entry
- Debian Security Tracker CVE-2012-5625 vendor-advisory