CVE-2017-7200

Severity: medium (CVSS 5.8 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 2.1% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2017-03-21 · updated 2026-09-17
Weakness: CWE-918

Description

An SSRF issue was discovered in OpenStack Glance before Newton. The 'copy_from' feature in the Image Service API v1 allowed an attacker to perform masked network port scans. With v1, it is possible to create images with a URL such as 'http://localhost:22'. This could then allow an attacker to enumerate internal network details while appearing masked, since the scan would appear to originate from the Glance Image service.

Affected products

OpenStack Glance: before 11.0.0 — fixed in 11.0.0

How to fix

Upgrade to a fixed version: OpenStack Glance 11.0.0. Check the vendor advisory for mitigations.

References

http://www.securityfocus.com/bid/96988
https://bugs.launchpad.net/ossn/+bug/1153614
https://bugs.launchpad.net/ossn/+bug/1606495
https://wiki.openstack.org/wiki/OSSN/OSSN-0078
http://www.securityfocus.com/bid/96988
https://bugs.launchpad.net/ossn/+bug/1153614
https://bugs.launchpad.net/ossn/+bug/1606495
https://wiki.openstack.org/wiki/OSSN/OSSN-0078

Get alerted when CVE-2017-7200 or the next vulnerability affects your stack