Dashboard / CVE-2012-5625

CVE-2012-5625

MEDIUM
MEDIUM Priority: 0.09 BB Relevance: 38/100
Published: 2012-12-26 Modified: 2026-10-30 First seen: 2026-10-30 Status: active

Attack Surface

Low Complexity No Interaction Conf. Impact Scope Change

CVSS Vector Breakdown

AV: Local
AC: Low
PR: Low
UI: None
S: Changed
C: High
I: None
A: None

Description

OpenStack Compute (Nova) Folsom before 2012.2.2 and Grizzly, when using libvirt and LVM backed instances, does not properly clear physical volume (PV) content when reallocating for instances, which allows attackers to obtain sensitive information by reading the memory of the previous logical volume (LV).

Weakness Classification (2)

Affected Software (2)

VendorProductVersion
openstack folsom 2012.2
openstack grizzly -

References & Advisories (12)

https://access.redhat.com/errata/RHSA-2013:0208
vendor-advisory x_refsource_REDHAT

Bug Bounty Relevance

38 / 100
✓ Low complexity
✓ No user interaction

CVSS Score

6.5 / 10.0 v3.1
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N

EPSS — Exploitation Probability

1.35%
Raw Score 0.013500
Percentile 71.5%
Date 2026-10-31

EPSS Trend

2026-10-31
0.01350
2026-10-30
0.02020

Intelligence Sources

mitre ref →
nvd ref →

External Links