OpenStack Compute (Nova) Folsom before 2012.2.2 and Grizzly, when using libvirt and LVM backed instances, does not properly clear physical volume (PV) content when reallocating for instances, which allows attackers to obtain sensitive information by reading the memory of the previous logical volume (LV).
01
beschreibt (1)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2012-5625US | medium4.3 | — | ||
OpenStack Compute (Nova) Folsom before 2012.2.2 and Grizzly, when using libvirt and LVM backed instances, does not properly clear physical volume (PV) content when reallocating for… | ||||
02
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- http://osvdb.org/88419WEB
- http://rhn.redhat.com/errata/RHSA-2013-0208.htmlADVISORY
- http://www.openwall.com/lists/oss-security/2012/12/11/5WEB
- http://www.ubuntu.com/usn/USN-1663-1FIX
- https://bugs.launchpad.net/nova/+bug/1070539WEB
- https://bugzilla.redhat.com/show_bug.cgi?id=884293REPORT
- https://github.com/openstack/nova/commit/9d2ea970422591f8cdc394001be9a2deca499a5fFIX
- https://github.com/openstack/nova/commit/a99a802e008eed18e39fc1d98170edc495cbd354FIX
scry
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan