Weekly edition	Kernel	Security	Distributions	Contact Us	Search
Archives	Calendar	Subscribe	Write for LWN	LWN.net FAQ	Sponsors

nova: information disclosure

Package(s):

nova

CVE #(s):

CVE-2012-5625

Created:

December 19, 2012

Updated:

December 19, 2012

Description:

From the Ubuntu advisory:

Eric Windisch discovered that Nova did not properly clear LVM-backed images before they were reallocated which could potentially lead to an information leak. This issue only affected setups using libvirt LVM-backed instances.

Alerts:

Ubuntu	USN-1663-1	2012-12-12
Red Hat	RHSA-2013:0208-01	2013-01-30

(Log in to post comments)