CVE-2023-29552
netapp smi-s provider, suse manager server, suse linux enterprise server
Published 25 Apr 2023 · updated 17 Jun 2026 · Analyzed
7.5 High · CVSS 3.1, NVD
Exploited in the wild
CISA added this to its Known Exploited Vulnerabilities catalog on 8 Nov 2023, with a remediation deadline of 29 Nov 2023 for US federal agencies.
Required action: Apply mitigations per vendor instructions or disable SLP service or port 427/UDP on all systems running on untrusted networks, including those directly connected to the Internet.
Description
The Service Location Protocol (SLP, RFC 2608) allows an unauthenticated, remote attacker to register arbitrary services. This could allow the attacker to use spoofed UDP traffic to conduct a denial-of-service attack with a significant amplification factor.
References
- blogs.vmware.com/security/2023/04/vmware-response-to-cve-2023-29552-reflective-denial-of-service-dos-amplification-vulnerability-in-slp.html · Third Party Advisory
- curesec.com/blog/article/CVE-2023-29552-Service-Location-Protocol-Denial-of-Service-Amplification-Attack-212.html · Exploit, Third Party Advisory
- datatracker.ietf.org/doc/html/rfc2608 · Technical Description
- github.com/curesec/slpload · Product
- security.netapp.com/advisory/ntap-20230426-0001/ · Third Party Advisory
- www.bitsight.com/blog/new-high-severity-vulnerability-cve-2023-29552-discovered-service-location-protocol-slp · Exploit, Third Party Advisory
- www.cisa.gov/news-events/alerts/2023/04/25/abuse-service-location-protocol-may-lead-dos-attacks · Third Party Advisory, US Government Resource
- www.suse.com/support/kb/doc/?id=000021051 · Third Party Advisory
- www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2023-29552 · US Government Resource