CVE-2023-29552
The Service Location Protocol (SLP, RFC 2608) allows an unauthenticated, remote attacker to register arbitrary services. This could allow…
- Published
- Updated
- Reserved
- Assigned by
- mitre
Description
The Service Location Protocol (SLP, RFC 2608) allows an unauthenticated, remote attacker to register arbitrary services. This could allow the attacker to use spoofed UDP traffic to conduct a denial-of-service attack with a significant amplification factor.
Exploited in the wild
CISA lists this vulnerability in its Known Exploited Vulnerabilities catalog as Service Location Protocol (SLP) Denial-of-Service Vulnerability.
- Added
- 8 Nov 2023
- Fix due (US federal)
- 29 Nov 2023
- Used by ransomware
- Not known
Apply mitigations per vendor instructions or disable SLP service or port 427/UDP on all systems running on untrusted networks, including those directly connected to the Internet.
Scores
| Scored by | CVSS | Score | Vector |
|---|---|---|---|
| CISA-ADPADP (enrichment) | 3.1 | High7.5 | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H |
| NVDNVD · Analyzed | 3.1 | High7.5 | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H |
- EPSS (exploitation in 30 days)
- 64.0% · top 0.8% of all CVEs (6 Nov 2026)
- CISA SSVC
- Exploitation: active · Automatable: yes · Technical impact: partial
The list uses the assigner's score when there is one, then CISA's, then NVD's: High 7.5.
Weakness
- n/a
- CWE-noinfo Not enough information
Affected products
n/a
- affected n/a
References (9)
- https://datatracker.ietf.org/doc/html/rfc2608 (opens in a new tab)x_transferred
- https://www.bitsight.com/blog/new-high-severity-vulnerability-cve-2023-29552-discovered-service-location-protocol-slp (opens in a new tab)x_transferred
- https://blogs.vmware.com/security/2023/04/vmware-response-to-cve-2023-29552-reflective-denial-of-service-dos-amplification-vulnerability-in-slp.html (opens in a new tab)x_transferred
- https://www.cisa.gov/news-events/alerts/2023/04/25/abuse-service-location-protocol-may-lead-dos-attacks (opens in a new tab)x_transferred
- https://www.suse.com/support/kb/doc/?id=000021051 (opens in a new tab)x_transferred
- https://curesec.com/blog/article/CVE-2023-29552-Service-Location-Protocol-Denial-of-Service-Amplification-Attack-212.html (opens in a new tab)x_transferred
- https://github.com/curesec/slpload (opens in a new tab)x_transferred
- https://security.netapp.com/advisory/ntap-20230426-0001/ (opens in a new tab)x_transferred
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2023-29552 (opens in a new tab)government-resource
Sources
The same CVE in the primary databases and aggregators, to check against.
- CVE.org record (opens in a new tab)
- CVE List JSON (GitHub) (opens in a new tab)
- NVD (opens in a new tab)
- CISA KEV catalog (opens in a new tab)
- FIRST EPSS (opens in a new tab)
- OSV.dev (opens in a new tab)
- GitHub Advisories (opens in a new tab)
- CIRCL Vulnerability-Lookup (opens in a new tab)
Badge for a README or a ticket
[](https://trackcve.app/cve/CVE-2023-29552)Record last updated .