Vulnerability DatabaseCVE-2012-5625
Mend.io Vulnerability Database
The largest open source vulnerability database
What is a Vulnerability ID?
New vulnerability? Tell us about it!
CVE-2012-5625
Published:December 26, 2012
Updated:November 02, 2026
OpenStack Compute (Nova) Folsom before 2012.2.2 and Grizzly, when using libvirt and LVM backed instances, does not properly clear physical volume (PV) content when reallocating for instances, which allows attackers to obtain sensitive information by reading the memory of the previous logical volume (LV).
Related Resources (17)
https://github.com/openstack/nova
https://github.com/pypa/advisory-database/tree/main/vulns/nova/PYSEC-2012-42.yaml
http://rhn.redhat.com/errata/RHSA-2013-0208.html
http://www.securityfocus.com/bid/56904
http://osvdb.org/88419
https://bugzilla.redhat.com/show_bug.cgi?id=884293
https://github.com/advisories/GHSA-rwhr-h69g-8qmq
https://github.com/openstack/nova/commit/a99a802e008eed18e39fc1d98170edc495cbd354
http://www.ubuntu.com/usn/USN-1663-1
https://bugs.launchpad.net/nova/+bug/1070539
https://access.redhat.com/security/cve/CVE-2012-5625
https://launchpad.net/nova/folsom/2012.2.2
https://nvd.nist.gov/vuln/detail/CVE-2012-5625
https://access.redhat.com/errata/RHSA-2013:0208
https://github.com/openstack/nova/commit/9d2ea970422591f8cdc394001be9a2deca499a5f
https://github.com/pypa/advisory-database/tree/main/vulns/nova/PYSEC-2012-41.yaml
http://www.openwall.com/lists/oss-security/2012/12/11/5
Do you need more information?
Contact Us
CVSS v4
Base Score:
8.2
Attack Vector
LOCAL
Attack Complexity
LOW
Attack Requirements
NONE
Privileges Required
LOW
User Interaction
NONE
Vulnerable System Confidentiality
HIGH
Vulnerable System Integrity
NONE
Vulnerable System Availability
NONE
Subsequent System Confidentiality
HIGH
Subsequent System Integrity
NONE
Subsequent System Availability
NONE
CVSS v3
Base Score:
6.5
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
CHANGED
Confidentiality
HIGH
Integrity
NONE
Availability
NONE
Weakness Type (CWE)
Improper Removal of Sensitive Information Before Storage or Transfer
CWE-212
Exposure of Sensitive Information to an Unauthorized Actor
CWE-200
EPSS
Base Score:
1.35