CVE

Id
58868  
CVE No.
CVE-2012-5625  
Status
Candidate  
Description
OpenStack Compute (Nova) Folsom before 2012.2.2 and Grizzly, when using libvirt and LVM backed instances, does not properly clear physical volume (PV) content when reallocating for instances, which allows attackers to obtain sensitive information by reading the memory of the previous logical volume (LV).  
Phase
Assigned (20121024)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
602091 58868 CVE-2012-5625 MLIST:[oss-security] 20121211 [OSSA 2012-020] Information leak in libvirt LVM-backed instances (CVE-2012-5625)  View
602092 58868 CVE-2012-5625 URL:http://www.openwall.com/lists/oss-security/2012/12/11/5  View
602093 58868 CVE-2012-5625 MISC:https://bugzilla.redhat.com/show_bug.cgi?id=884293  View
602094 58868 CVE-2012-5625 CONFIRM:https://bugs.launchpad.net/nova/+bug/1070539  View
602095 58868 CVE-2012-5625 CONFIRM:https://github.com/openstack/nova/commit/9d2ea970422591f8cdc394001be9a2deca499a5f  View
602096 58868 CVE-2012-5625 CONFIRM:https://github.com/openstack/nova/commit/a99a802e008eed18e39fc1d98170edc495cbd354  View
602097 58868 CVE-2012-5625 CONFIRM:https://launchpad.net/nova/folsom/2012.2.2  View
602098 58868 CVE-2012-5625 REDHAT:RHSA-2013:0208  View
602099 58868 CVE-2012-5625 URL:http://rhn.redhat.com/errata/RHSA-2013-0208.html  View
602100 58868 CVE-2012-5625 UBUNTU:USN-1663-1  View
602101 58868 CVE-2012-5625 URL:http://www.ubuntu.com/usn/USN-1663-1  View
602102 58868 CVE-2012-5625 BID:56904  View
602103 58868 CVE-2012-5625 URL:http://www.securityfocus.com/bid/56904  View
602104 58868 CVE-2012-5625 OSVDB:88419  View

Related JVN