CVE-2023-29552: Service Location Protocol (SLP) Denial-of-Service Vulnerability
First published: Tue Apr 25 2023(Updated: )
The Service Location Protocol (SLP, RFC 2608) allows an unauthenticated, remote attacker to register arbitrary services. This could allow the attacker to use spoofed UDP traffic to conduct a denial-of-service attack with a significant amplification factor.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| IETF Service Location Protocol (SLP) | ||
| Netapp Smi-s Provider | ||
| SUSE Manager Server | ||
| SUSE Linux Enterprise Server | =11 | |
| SUSE Linux Enterprise Server | =12 | |
| Suse Linux Enterprise Server Sap | =12 | |
| SUSE Linux Enterprise Server | =15 | |
| Suse Linux Enterprise Server Sap | =15 | |
| VMware ESXi | <7.0 | |
| Service Location Protocol Project Service Location Protocol |
Remedy
Apply mitigations per vendor instructions or disable SLP service or port 427/UDP on all systems running on untrusted networks, including those directly connected to the Internet.
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- https://www.bitsight.com/blog/new-high-severity-vulnerability-cve-2023-29552-discovered-service-location-protocol-slp
- https://www.cisa.gov/news-events/alerts/2023/04/25/abuse-service-location-protocol-may-lead-dos-attacks.
- https://blogs.vmware.com/security/2023/04/vmware-response-to-cve-2023-29552-reflective-denial-of-service-dos-amplification-vulnerability-in-slp.html
- https://curesec.com/blog/article/CVE-2023-29552-Service-Location-Protocol-Denial-of-Service-Amplification-Attack-212.html
- https://datatracker.ietf.org/doc/html/rfc2608
- https://github.com/curesec/slpload
- https://security.netapp.com/advisory/ntap-20230426-0001/
- https://www.cisa.gov/news-events/alerts/2023/04/25/abuse-service-location-protocol-may-lead-dos-attacks
- https://www.suse.com/support/kb/doc/?id=000021051
Frequently Asked Questions
What is CVE-2023-29552?
CVE-2023-29552 is a vulnerability in the Service Location Protocol (SLP) that allows an unauthenticated remote attacker to register arbitrary services and conduct a denial-of-service attack with a significant amplification factor.
What is the severity of CVE-2023-29552?
CVE-2023-29552 has a severity value of 7.5, which is classified as high.
Which software products are affected by CVE-2023-29552?
The following software products are affected by CVE-2023-29552: Netapp Smi-s Provider, SUSE Manager Server, SUSE Linux Enterprise Server 11, SUSE Linux Enterprise Server 12, SUSE Linux Enterprise Server 12 with SAP, SUSE Linux Enterprise Server 15, SUSE Linux Enterprise Server 15 with SAP, VMware ESXi, and Service Location Protocol Project Service Location Protocol.
How can an unauthenticated remote attacker exploit CVE-2023-29552?
An unauthenticated remote attacker can exploit CVE-2023-29552 by sending spoofed UDP traffic to register arbitrary services, causing a denial-of-service attack with a significant amplification factor.
Where can I find more information about CVE-2023-29552?
You can find more information about CVE-2023-29552 at the following references: [link1], [link2], [link3].
- agent/description
- agent/type
- agent/event
- agent/first-publish-date
- agent/last-modified-date
- exploited/true
- collector/cisa-known-exploited
- source/CISA
- agent/software-canonical-lookup
- agent/severity
- agent/references
- agent/remedy
- agent/title
- agent/author
- agent/softwarecombine
- agent/tags
- collector/nvd-index
- agent/software-canonical-lookup-request
- vendor/ietf
- canonical/ietf service location protocol (slp)
- vendor/netapp
- canonical/netapp smi-s provider
- vendor/suse
- canonical/suse manager server
- canonical/suse linux enterprise server
- version/suse linux enterprise server/11
- version/suse linux enterprise server/12
- canonical/suse linux enterprise server sap
- version/suse linux enterprise server sap/12
- version/suse linux enterprise server/15
- version/suse linux enterprise server sap/15
- vendor/vmware
- canonical/vmware esxi
- vendor/service location protocol project
- canonical/service location protocol project service location protocol