Service Location Protocol (SLP) Denial-of-Service Vulnerability

HIGH 7.5EXPLOITED (CISA KEV)CVE-2023-29552 · Published 25/04/2023 · updated 17/06/2026

Service Location Protocol (SLP) Denial-of-Service Vulnerability. Actively exploited: CISA added this vulnerability to its Known Exploited Vulnerabilities catalog on 08/11/2023. Patch affected systems as an emergency.

Package	Affected versions	Patched versions
Service Location Protocol (SLP) IETF	Versions not published yet (product named by CISA KEV)

Description

The Service Location Protocol (SLP, RFC 2608) allows an unauthenticated, remote attacker to register arbitrary services. This could allow the attacker to use spoofed UDP traffic to conduct a denial-of-service attack with a significant amplification factor.

References

blogs.vmware.com/security/2023/04/vmware-response-to-cve-2023-29552-reflective-denial-of-service-dos-amplification-vulnerability-in-slp.html · Third Party Advisory
curesec.com/blog/article/CVE-2023-29552-Service-Location-Protocol-Denial-of-Service-Amplification-Attack-212.html · Exploit
datatracker.ietf.org/doc/html/rfc2608 · Technical Description
curesec/slpload · Product
security.netapp.com/advisory/ntap-20230426-0001 · Third Party Advisory
bitsight.com/blog/new-high-severity-vulnerability-cve-2023-29552-discovered-service-location-protocol-slp · Exploit
cisa.gov/news-events/alerts/2023/04/25/abuse-service-location-protocol-may-lead-dos-attacks · Third Party Advisory
suse.com/support/kb/doc · Third Party Advisory
cisa.gov/known-exploited-vulnerabilities-catalog · US Government Resource
CISA KEV · CVE-2023-29552

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free