Service Location Protocol (SLP) Denial-of-Service Vulnerability

ALTO 7.5EXPLOITED (CISA KEV)CVE-2023-29552 · Published 25/04/2023 · updated 17/06/2026

Service Location Protocol (SLP) Denial-of-Service Vulnerability. Actively exploited: CISA added this vulnerability to its Known Exploited Vulnerabilities catalog on 08/11/2023. Patch affected systems as an emergency.

En resumen

CVE-2023-29552 es una vulnerabilidad ALTO (CVSS 7.5).
Explotada activamente: CISA la añadió al catálogo KEV el 08/11/2023.
Probabilidad de explotación en los próximos 30 días (EPSS): 64.0%, mayor que el 99.2% de las vulnerabilidades.
Aún no hay una versión corregida: sigue el aviso del fabricante en Referencias.

Package	Affected versions	Patched versions
Service Location Protocol (SLP) IETF	Versions not published yet (product named by CISA KEV)

Description

The Service Location Protocol (SLP, RFC 2608) allows an unauthenticated, remote attacker to register arbitrary services. This could allow the attacker to use spoofed UDP traffic to conduct a denial-of-service attack with a significant amplification factor.

References

blogs.vmware.com/security/2023/04/vmware-response-to-cve-2023-29552-reflective-denial-of-service-dos-amplification-vulnerability-in-slp.html · Third Party Advisory
curesec.com/blog/article/CVE-2023-29552-Service-Location-Protocol-Denial-of-Service-Amplification-Attack-212.html · Exploit
datatracker.ietf.org/doc/html/rfc2608 · Technical Description
curesec/slpload · Product
security.netapp.com/advisory/ntap-20230426-0001 · Third Party Advisory
bitsight.com/blog/new-high-severity-vulnerability-cve-2023-29552-discovered-service-location-protocol-slp · Exploit
cisa.gov/news-events/alerts/2023/04/25/abuse-service-location-protocol-may-lead-dos-attacks · Third Party Advisory
suse.com/support/kb/doc · Third Party Advisory
cisa.gov/known-exploited-vulnerabilities-catalog

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free