CVE-2017-7549
instack-undercloud vulnerable to symlink attack on tmp files
A flaw was found in instack-undercloud 7.2.0 as packaged in Red Hat OpenStack Platform Pike, 6.1.0 as packaged in Red Hat OpenStack Platform Oacta, 5.3.0 as packaged in Red Hat OpenStack Newton, where pre-install and security policy scripts used insecure temporary files. A local user could exploit this flaw to conduct a symbolic-link attack, allowing them to overwrite the contents of arbitrary files.
Attack profile
How easy it is to exploit
- Attack vector
- Local
- Complexity
- High
- Privileges needed
- Low
- User interaction
- None
What an attacker can affect
- Confidentiality
- High
- Integrity
- Low
- Availability
- None
Exploit likelihood
What each source reports
NVD Score used
A flaw was found in instack-undercloud 7.2.0 as packaged in Red Hat OpenStack Platform Pike, 6.1.0 as packaged in Red Hat OpenStack Platform Oacta, 5.3.0 as packaged in Red Hat OpenStack Newton, where pre-install and security policy scripts used insecure temporary files. A local user could exploit this flaw to conduct a symbolic-link attack, allowing them to overwrite the contents of arbitrary files.
- Record
CVE-2017-7549- CVSS 3.0
- 6.4 Medium
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:L/A:N - CVSS 2.0
- 3.3 Low
AV:L/AC:M/Au:N/C:P/I:P/A:N - Weakness
- CWE-377, CWE-59
- Updated
- 2026-11-02
CVE List No score
A flaw was found in instack-undercloud 7.2.0 as packaged in Red Hat OpenStack Platform Pike, 6.1.0 as packaged in Red Hat OpenStack Platform Oacta, 5.3.0 as packaged in Red Hat OpenStack Newton, where pre-install and security policy scripts used insecure temporary files. A local user could exploit this flaw to conduct a symbolic-link attack, allowing them to overwrite the contents of arbitrary files.
- Record
CVE-2017-7549- Weakness
- CWE-377
- Updated
- 2026-11-02
EUVDEUVD-2022-2488 No score
A flaw was found in instack-undercloud 7.2.0 as packaged in Red Hat OpenStack Platform Pike, 6.1.0 as packaged in Red Hat OpenStack Platform Oacta, 5.3.0 as packaged in Red Hat OpenStack Newton, where pre-install and security policy scripts used insecure temporary files. A local user could exploit this flaw to conduct a symbolic-link attack, allowing them to overwrite the contents of arbitrary files.
- Record
EUVD-2022-2488- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-53wm-97p6-582f
instack-undercloud vulnerable to symlink attack on tmp files
A flaw was found in instack-undercloud 7.2.0 as packaged in Red Hat OpenStack Platform Pike, 6.1.0 as packaged in Red Hat OpenStack Platform Oacta, 5.3.0 as packaged in Red Hat OpenStack Newton, where pre-install and security policy scripts used insecure temporary files. A local user could exploit this flaw to conduct a symbolic-link attack, allowing them to overwrite the contents of arbitrary files.
- Record
GHSA-53wm-97p6-582f- CVSS 3.0
- 6.4 Medium
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:L/A:N - Weakness
- CWE-59, CWE-377
- Updated
- 2026-11-02
OSV
A flaw was found in instack-undercloud 7.2.0 as packaged in Red Hat OpenStack Platform Pike, 6.1.0 as packaged in Red Hat OpenStack Platform Oacta, 5.3.0 as packaged in Red Hat OpenStack Newton, where pre-install and security policy scripts used insecure temporary files. A local user could exploit this flaw to conduct a symbolic-link attack, allowing them to overwrite the contents of arbitrary files.
- Record
CVE-2017-7549- CVSS 3.0
- 6.4 Medium
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:L/A:N - Updated
- 2026-11-02
OSVGHSA-53wm-97p6-582f
instack-undercloud vulnerable to symlink attack on tmp files
A flaw was found in instack-undercloud 7.2.0 as packaged in Red Hat OpenStack Platform Pike, 6.1.0 as packaged in Red Hat OpenStack Platform Oacta, 5.3.0 as packaged in Red Hat OpenStack Newton, where pre-install and security policy scripts used insecure temporary files. A local user could exploit this flaw to conduct a symbolic-link attack, allowing them to overwrite the contents of arbitrary files.
- Record
GHSA-53wm-97p6-582f- CVSS 3.0
- 6.4 Medium
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:L/A:N - Weakness
- CWE-377, CWE-59
- Updated
- 2026-11-02
Show 7 moreShow less
OSVPYSEC-2017-152
A flaw was found in instack-undercloud 7.2.0 as packaged in Red Hat OpenStack Platform Pike, 6.1.0 as packaged in Red Hat OpenStack Platform Oacta, 5.3.0 as packaged in Red Hat OpenStack Newton, where pre-install and security policy scripts used insecure temporary files. A local user could exploit this flaw to conduct a symbolic-link attack, allowing them to overwrite the contents of arbitrary files.
- Record
PYSEC-2017-152- CVSS 3.0
- 6.4 Medium
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:L/A:N - Updated
- 2026-11-02
OSVPYSEC-2026-645
instack-undercloud vulnerable to symlink attack on tmp files
A flaw was found in instack-undercloud 7.2.0 as packaged in Red Hat OpenStack Platform Pike, 6.1.0 as packaged in Red Hat OpenStack Platform Oacta, 5.3.0 as packaged in Red Hat OpenStack Newton, where pre-install and security policy scripts used insecure temporary files. A local user could exploit this flaw to conduct a symbolic-link attack, allowing them to overwrite the contents of arbitrary files.
- Record
PYSEC-2026-645- CVSS 3.0
- 6.4 Medium
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:L/A:N - Updated
- 2026-11-02
OSVRHSA-2017:2557
Red Hat Security Advisory: instack-undercloud security update
- Record
RHSA-2017:2557- CVSS 3.0
- 6.1 Medium
CVSS:3.0/AV:L/AC:H/PR:L/UI:R/S:C/C:H/I:L/A:N - Updated
- 2026-11-02
OSVRHSA-2017:2649
Red Hat Security Advisory: instack-undercloud security, bug fix, and enhancement update
- Record
RHSA-2017:2649- CVSS 3.0
- 6.1 Medium
CVSS:3.0/AV:L/AC:H/PR:L/UI:R/S:C/C:H/I:L/A:N - Updated
- 2026-11-02
OSVRHSA-2017:2687
Red Hat Security Advisory: instack-undercloud security update
- Record
RHSA-2017:2687- CVSS 3.0
- 6.1 Medium
CVSS:3.0/AV:L/AC:H/PR:L/UI:R/S:C/C:H/I:L/A:N - Updated
- 2026-11-02
OSVRHSA-2017:2693
Red Hat Security Advisory: instack-undercloud security update
- Record
RHSA-2017:2693- CVSS 3.0
- 6.1 Medium
CVSS:3.0/AV:L/AC:H/PR:L/UI:R/S:C/C:H/I:L/A:N - Updated
- 2026-11-02
OSVRHSA-2017:2726
Red Hat Security Advisory: instack-undercloud security, bug fix, and enhancement update
- Record
RHSA-2017:2726- CVSS 3.0
- 6.1 Medium
CVSS:3.0/AV:L/AC:H/PR:L/UI:R/S:C/C:H/I:L/A:N - Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
instack-undercloudPyPI |
through 7.2.0 | None known |
instack-undercloudPyPI |
through 7.2.0, plus listed versions 4.0.1.dev904.1.04.2.04.2.15.0.0 Show 35 moreShow less5.0.0.0b15.0.0.0b25.0.0.0b35.0.0.0rc15.0.0.0rc25.0.0.0rc35.1.05.2.05.3.05.3.15.3.105.3.25.3.35.3.45.3.55.3.65.3.75.3.85.3.96.0.06.0.0.0b26.0.0.0rc16.0.0.0rc26.1.06.1.16.1.26.1.36.1.46.1.56.1.66.1.76.1.87.0.07.0.0.0b17.1.0 |
None known |
instackPyPI |
through 7.2.0, through 6.1.0, through 5.3.0, plus listed versions 0.0.9.dev45.0.05.0.0.0b15.0.0.0b25.1.0 |
None known |
instack-undercloudRed Hat:openstack-director:9::el7 |
before 0:4.0.0-17.el7ost | 0:4.0.0-17.el7ost |
instack-undercloudRed Hat:openstack:10::el7 |
before 0:5.3.0-3.el7ost | 0:5.3.0-3.el7ost |
instack-undercloudRed Hat:openstack-director:8::el7 |
before 0:2.2.7-10.el7ost | 0:2.2.7-10.el7ost |
instack-undercloudRed Hat:openstack-director:7::el7 |
before 0:2.1.2-41.el7ost | 0:2.1.2-41.el7ost |
instack-undercloudRed Hat:openstack:11::el7 |
before 0:6.1.0-3.el7ost | 0:6.1.0-3.el7ost |
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2017-7549 is a medium vulnerability (CVSS 6.4) in Openstack Instack-undercloud, published September 21, 2017. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.35%, the 28th percentile. Fixed in instack-undercloud 0:4.0.0-17.el7ost.
References
access.redhat.com/errata/RHSA-2017:2726
securityfocus.com/bid/100407
Show 19 moreShow less
bugzilla.redhat.com/show_bug.cgi?id=1477403
nvd.nist.gov/vuln/detail/CVE-2017-7549
web.archive.org/web/20170907040549/http://www.securityfocus.com/bid/100407
github.com/pypa/advisory-database/tree/main/vulns/instack/PYSEC-2017-152.yaml
opendev.org/openstack/instack-undercloud
pypi.org/project/instack-undercloud
security.access.redhat.com/data/csaf/v2/advisories/2017/rhsa-2017_2557.json
cve.org/CVERecord?id=CVE-2017-7549