IETF · Service Location Protocol (SLP)
CVE-2023-29552
Service Location Protocol (SLP) Denial-of-Service Vulnerability
What it is
The Service Location Protocol (SLP, RFC 2608) allows an unauthenticated, remote attacker to register arbitrary services. This could allow the attacker to use spoofed UDP traffic to conduct a denial-of-service attack with a significant amplification factor.
CISA: The Service Location Protocol (SLP) contains a denial-of-service (DoS) vulnerability that could allow an unauthenticated, remote attacker to register services and use spoofed UDP traffic to conduct a denial-of-service (DoS) attack with a significant amplification factor.
What to do
Apply mitigations per vendor instructions or disable SLP service or port 427/UDP on all systems running on untrusted networks, including those directly connected to the Internet.
Deadline for US federal agencies: November 29, 2023
- Added to the CISA list
- November 8, 2023
- Published
- April 25, 2023
- Severity
- High 7.5 CVSS 3.1
- Chance of attacks in the next 30 days (EPSS)
- 64% in the top 0.8% of all known vulnerabilities
- More details
- NVD · CVE.org · CISA
All references (8)
- https://datatracker.ietf.org/doc/html/rfc2608
- https://www.bitsight.com/blog/new-high-severity-vulnerability-cve-2023-29552-discovered-service-location-prot…
- https://blogs.vmware.com/security/2023/04/vmware-response-to-cve-2023-29552-reflective-denial-of-service-dos-…
- https://www.cisa.gov/news-events/alerts/2023/04/25/abuse-service-location-protocol-may-lead-dos-attacks
- https://www.suse.com/support/kb/doc/?id=000021051
- https://curesec.com/blog/article/CVE-2023-29552-Service-Location-Protocol-Denial-of-Service-Amplification-Att…
- https://github.com/curesec/slpload
- https://security.netapp.com/advisory/ntap-20230426-0001/
More exploited flaws from IETF
| Added | Vulnerability | Product | Severity | Attack chance |
|---|---|---|---|---|
| Oct 10, 2023 | Rapid Reset Attack | HTTP/2 | High 7.5 | >99.9% |
Sources: Known Exploited Vulnerabilities (CISA, public domain), CVE records (cve.org) and EPSS (FIRST). The chance of attacks is the EPSS estimate that someone will try to exploit the flaw in the next 30 days.