CVE-2017-7200 OpenStack Glance Server-Side Request Forgery (SSRF)

What is CVE-2017-7200?

CVE-2017-7200 is a medium-severity server-side request forgery vulnerability in n/a, published on 21 Mar 2017. An attacker can exploit it over the internet without logging in, with no action from the victim.

Official description

An SSRF issue was discovered in OpenStack Glance before Newton. The 'copy_from' feature in the Image Service API v1 allowed an attacker to perform masked network port scans. With v1, it is possible to create images with a URL such as 'http://localhost:22'. This could then allow an attacker to enumerate internal network details while appearing masked, since the scan would appear to originate from the Glance Image service.

Weakness: CWE-918

Which versions are affected by CVE-2017-7200?

3 open source packages ship an affected version, including glance. It affects 1 product.

Products include Openstack Glance.

How do I fix CVE-2017-7200?

Upgrade glance to 11.0.0a0 or later.

Upgrade, and send outbound requests through an allow-list that blocks internal addresses. More about Server-side request forgery.

Is CVE-2017-7200 being exploited?

There is no known exploitation of CVE-2017-7200 in the wild and no public exploit code.

Other vulnerabilities in n/a

• CVE-2015-8234 OpenStack Glance Signature Verification Bypass Medium 5.5
• CVE-2026-34881 OpenStack Glance is affected by Server-Side Request Forgery (SSRF) Medium 5.0
• CVE-2016-8611 Denial of service in openstack-glance Medium 4.3
• CVE-2015-3289 Denial of service in n/a Medium 4.0
• CVE-2015-5163 OpenStack Image Service (Glance) allows remote authenticated users to read arbitrary file Low 3.5

Sources

• CVE record
• NVD
• OSV
• GitHub advisory
• How this page is made

Also known as DEBIAN-CVE-2017-7200, GHSA-j6mr-cm6x-h6jg, PYSEC-2026-814, UBUNTU-CVE-2017-7200.