GHSA-rwhr-h69g-8qmq

Source

https://github.com/advisories/GHSA-rwhr-h69g-8qmq

Import Source

https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2022/05/GHSA-rwhr-h69g-8qmq/GHSA-rwhr-h69g-8qmq.json

JSON Data

https://api.osv.dev/v1/vulns/GHSA-rwhr-h69g-8qmq

Aliases

CVE-2012-5625
PYSEC-2012-42

Published

2022-05-17T05:15:11Z

Modified

2026-06-08T20:18:12Z

Summary

OpenStack Nova Information leak in libvirt LVM-backed instances

Details

OpenStack Compute (Nova) Folsom before 2012.2.2 and Grizzly, when using libvirt and LVM backed instances, does not properly clear physical volume (PV) content when reallocating for instances, which allows attackers to obtain sensitive information by reading the memory of the previous logical volume (LV).

Database specific

{
    "cwe_ids":  [
        "CWE-200"
    ],
    "github_reviewed":  true,
    "github_reviewed_at":  "2024-05-14T21:27:15Z",
    "nvd_published_at":  "2012-12-26T22:55:00Z",
    "severity":  "MODERATE"
}

References

Affected packages

PyPI / nova

Package

Name: nova; View open source insights on deps.dev
Purl: pkg:pypi/nova

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

12.0.0a0

Database specific

source

"https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2022/05/GHSA-rwhr-h69g-8qmq/GHSA-rwhr-h69g-8qmq.json"