Back to CVE Browser

CVE-2023-29552

🔥 Known Exploited (CISA KEV)HIGH

7.5

CVSS Severity Score

EPSS Score0.0000%

EPSS Percentile0.00th

Published2023-04-25

Last Modified2026-06-17

Data SourcesNVDCISA KEV

Vulnerability Description

The Service Location Protocol (SLP, RFC 2608) allows an unauthenticated, remote attacker to register arbitrary services. This could allow the attacker to use spoofed UDP traffic to conduct a denial-of-service attack with a significant amplification factor.

Affected Platforms (CPE)

📦

Netapp

Smi S Provider

All versions

📦

Suse

Manager Server

All versions

💻

Suse

Linux Enterprise Server

= 11= 12= 15

💻

Vmware

Esxi

< 7.0

References & Advisories

🔗 https://blogs.vmware.com/security/2023/04/vmware-response-to-cve-2023-29552-reflective-denial-of-service-dos-amplification-vulnerability-in-slp.html

🔗 https://curesec.com/blog/article/CVE-2023-29552-Service-Location-Protocol-Denial-of-Service-Amplification-Attack-212.html

🔗 https://datatracker.ietf.org/doc/html/rfc2608

🔗 https://github.com/curesec/slpload

🔗 https://security.netapp.com/advisory/ntap-20230426-0001/

🔗 https://www.bitsight.com/blog/new-high-severity-vulnerability-cve-2023-29552-discovered-service-location-protocol-slp

🔗 https://www.cisa.gov/news-events/alerts/2023/04/25/abuse-service-location-protocol-may-lead-dos-attacks

🔗 https://www.suse.com/support/kb/doc/?id=000021051

Related Vulnerabilities

CVE-2026-175277.7

In containerized-data-importer (CDI), the aggregated cdi.kubevirt.io:view ClusterRole, intended to provide read-only access to CDI...

In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: validate lcns_follow in log_replay conversion log_...

In the Linux kernel, the following vulnerability has been resolved: net: nexthop: Increase weight to u16 In CLOS networks, as li...

CVE-2026-660114.8

ImageMagick before 7.1.2-27 contains a memory leak vulnerability in the magick command-line interface when invalid options are pro...