CVE-2012-5625
2 advisories.
PyPI/nova CVE-2012-5625: medium
OpenStack Nova Information leak in libvirt LVM-backed instances
Action: Upgrade nova to 12.0.0a0 or later.
pip install nova==12.0.0a0Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 12.0.0a0 | - |
Fixed versions
| 12.0.0a0 |
Sources
- osv: GHSA-rwhr-h69g-8qmq
- https://nvd.nist.gov/vuln/detail/CVE-2012-5625
- https://github.com/openstack/nova/commit/9d2ea970422591f8cdc394001be9a2deca499a5f
- https://github.com/openstack/nova/commit/a99a802e008eed18e39fc1d98170edc495cbd354
- https://bugs.launchpad.net/nova/+bug/1070539
- https://bugzilla.redhat.com/show_bug.cgi?id=884293
- https://github.com/openstack/nova
- https://github.com/pypa/advisory-database/tree/main/vulns/nova/PYSEC-2012-41.yaml
- https://github.com/pypa/advisory-database/tree/main/vulns/nova/PYSEC-2012-42.yaml
- https://launchpad.net/nova/folsom/2012.2.2
- http://rhn.redhat.com/errata/RHSA-2013-0208.html
- http://www.openwall.com/lists/oss-security/2012/12/11/5
- http://www.ubuntu.com/usn/USN-1663-1
CVE-2012-5625 · published · modified · JSON
PyPI/nova CVE-2012-5625: unknown
OpenStack Compute (Nova) Folsom before 2012.2.2 and Grizzly, when using libvirt and LVM backed instances, does not properly clear physical volume (PV) content when reallocating for instances, which al
Action: No fix published. Pin and monitor.
Affected
No affected ranges in the source.
Fixed versions
No fixed version in the source.
Sources
- osv: PYSEC-2012-42
- http://osvdb.org/88419
- http://www.openwall.com/lists/oss-security/2012/12/11/5
- http://www.securityfocus.com/bid/56904
- https://bugs.launchpad.net/nova/+bug/1070539
- https://launchpad.net/nova/folsom/2012.2.2
- http://rhn.redhat.com/errata/RHSA-2013-0208.html
- https://bugzilla.redhat.com/show_bug.cgi?id=884293
- http://www.ubuntu.com/usn/USN-1663-1
- https://github.com/openstack/nova/commit/9d2ea970422591f8cdc394001be9a2deca499a5f
- https://github.com/openstack/nova/commit/a99a802e008eed18e39fc1d98170edc495cbd354
- https://github.com/advisories/GHSA-rwhr-h69g-8qmq
CVE-2012-5625 · published · modified · JSON