IETF · Service Location Protocol (SLP)
CVE-2023-29552
Service Location Protocol (SLP) Denial-of-Service Vulnerability
Nedir
The Service Location Protocol (SLP, RFC 2608) allows an unauthenticated, remote attacker to register arbitrary services. This could allow the attacker to use spoofed UDP traffic to conduct a denial-of-service attack with a significant amplification factor.
CISA: The Service Location Protocol (SLP) contains a denial-of-service (DoS) vulnerability that could allow an unauthenticated, remote attacker to register services and use spoofed UDP traffic to conduct a denial-of-service (DoS) attack with a significant amplification factor.
Ne yapmalı
Apply mitigations per vendor instructions or disable SLP service or port 427/UDP on all systems running on untrusted networks, including those directly connected to the Internet.
ABD federal kurumları için son tarih: 29 Kasım 2023
- CISA listesine eklenme
- 8 Kasım 2023
- Yayımlanma
- 25 Nisan 2023
- Önem
- Yüksek 7,5 CVSS 3.1
- Önümüzdeki 30 günde saldırı olasılığı (EPSS)
- 64% bilinen tüm açıkların en üstteki 0,8% diliminde
- Daha fazla ayrıntı
- NVD · CVE.org · CISA
Tüm kaynaklar (8)
- https://datatracker.ietf.org/doc/html/rfc2608
- https://www.bitsight.com/blog/new-high-severity-vulnerability-cve-2023-29552-discovered-service-location-prot…
- https://blogs.vmware.com/security/2023/04/vmware-response-to-cve-2023-29552-reflective-denial-of-service-dos-…
- https://www.cisa.gov/news-events/alerts/2023/04/25/abuse-service-location-protocol-may-lead-dos-attacks
- https://www.suse.com/support/kb/doc/?id=000021051
- https://curesec.com/blog/article/CVE-2023-29552-Service-Location-Protocol-Denial-of-Service-Amplification-Att…
- https://github.com/curesec/slpload
- https://security.netapp.com/advisory/ntap-20230426-0001/
IETF için istismar edilen diğer açıklar
| Eklenme | Açık | Ürün | Önem | Saldırı olasılığı |
|---|---|---|---|---|
| 10 Eki 2023 | Rapid Reset Attack | HTTP/2 | Yüksek 7,5 | >99,9% |
Kaynaklar: Known Exploited Vulnerabilities (CISA, kamu malı), CVE records (cve.org) ve EPSS (FIRST). Saldırı olasılığı, birinin önümüzdeki 30 günde açığı istismar etmeye çalışacağına dair EPSS tahminidir.