Openstack nova: information leak in libvirt lvm-backed instances

published 2012-12-26 13 y ago modified 2026-10-30 10 d ago also EUVD-2012-0024 , GHSA-rwhr-h69g-8qmq , PYSEC-2012-41 , PYSEC-2012-42

cvss: 6.5; version 3.1, CNA
cisa kev: Not listed; not in CISA's catalog
epss: 1.3%; EPSS 1.3% chance of exploitation in 30 days, percentile 71%
public exploits: 0; none known

OpenStack Compute (Nova) Folsom before 2012.2.2 and Grizzly, when using libvirt and LVM backed instances, does not properly clear physical volume (PV) content when reallocating for instances, which allows attackers to obtain sensitive information by reading the memory of the previous logical volume (LV).

Patch / fix

fixed in 2 links 3

pypi nova 12.0.0a0
Red Hat OpenStack Folsom for RHEL 6 0:2012.2.2-8.el6ost

github.com/openstack/nova@9d2ea97 commit
github.com/openstack/nova@a99a802 commit
ubuntu.com/usn/USN-1663-1 advisory

Vendor advisories

What the vendors themselves say about their products: affected, fixed or not affected, and what to do.

red hat product security vex CVE-2012-5625 updated 2026-10-30 cvss 6.5

OpenStack Nova: information leak in libvirt LVM-backed instances

Red Hat OpenStack Folsom python-nova 2012.2.2-8.el6ost, openstack-nova 2012.2.2-8.el6ost, openstack-nova-api 2012.2.2-8.el6ost, openstack-nova-cert 2012.2.2-8.el6ost, openstack-nova-common 2012.2.2-8.el6ost, openstack-nova-volume 2012.2.2-8.el6ost, +5 more
fixed: vendor fix RHSA-2013:0208
Red Hat OpenStack Platform 16.2 python3-nova, openstack-nova, openstack-nova-api, openstack-nova-common, openstack-nova-compute, openstack-nova-console, +6 more Red Hat OpenStack Platform 17.1 python3-nova, openstack-nova, openstack-nova-api, openstack-nova-common, openstack-nova-compute, openstack-nova-conductor, +5 more Red Hat OpenStack Platform 18.0 openstack-nova
not affected: vulnerable code not present

Red Hat CSAF VEX © Red Hat, Inc., from https://security.access.redhat.com/data/csaf/v2/vex/; changed: reduced to product statuses and remediations. CC BY 4.0 · csaf

Exploit prediction

1.34% chance of exploitation in the next 30 days, higher than 71% of all scored CVEs (FIRST EPSS, 2026-11-09).

CVSS scores

assigned by	version	score	vector
CNA	3.1	6.5	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N
NVD	3.1	6.5	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N
NVD	2.0	4.3	AV:N/AC:M/Au:N/C:P/I:N/A:N

Affected packages

ecosystem	package	affected	fixed in
pypi	nova	<12.0.0a0	12.0.0a0

Affected products

Red Hat OpenStack Folsom for RHEL 6
Red Hat Red Hat OpenStack Platform 16.2
Red Hat Red Hat OpenStack Platform 17.1
Red Hat Red Hat OpenStack Platform 18.0

Classification

Weakness

CWE-212 Improper Removal of Sensitive Information Before Storage or Transfer
CWE-200 Exposure of Sensitive Information to an Unauthorized Actor

References

github.com /openstack/nova/commit/9d2ea970422591f8cdc394001be9a2deca499a5f
web, patch
github.com /openstack/nova/commit/a99a802e008eed18e39fc1d98170edc495cbd354
web, patch
ubuntu.com /usn/USN-1663-1
vendor-advisory, web, patch
rhn.redhat.com /errata/RHSA-2013-0208.html
vendor-advisory, web, advisory
access.redhat.com /errata/RHSA-2013:0208
vendor-advisory
osvdb.org /88419
vdb-entry, web
openwall.com /lists/oss-security/2012/12/11/5
mailing-list, web
securityfocus.com /bid/56904
vdb-entry, web
access.redhat.com /security/cve/CVE-2012-5625
vdb-entry
bugs.launchpad.net /nova/+bug/1070539
web
bugzilla.redhat.com /show_bug.cgi?id=884293
web, report
launchpad.net /nova/folsom/2012.2.2
web
nvd.nist.gov /vuln/detail/CVE-2012-5625
advisory
github.com /openstack/nova
package
github.com /pypa/advisory-database/tree/main/vulns/nova/PYSEC-2012-41.yaml
web
github.com /pypa/advisory-database/tree/main/vulns/nova/PYSEC-2012-42.yaml
web
github.com /advisories/GHSA-rwhr-h69g-8qmq
advisory

Sources

Fencer Intel keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.

Summary