The Service Location Protocol (SLP, RFC 2608) allows an unauthenticated, remote attacker…
Priority CRITICAL 90Exploited in the wildPublished · Updated
Key facts
- Attack vector
- Network
- Privileges required
- None
- User interaction
- None
- Attack complexity
- Low
- Impact type
- —
- Confidentiality · integrity · availability
- None · None · High
- Fix status
- Will not fix Red Hat: no fix planned
Attack profile from CVSS 3.1 · CISA ADP. Fix status from CNA and Red Hat.
Summary
The Service Location Protocol (SLP, RFC 2608) allows an unauthenticated, remote attacker to register arbitrary services. This could allow the attacker to use spoofed UDP traffic to conduct a denial-of-service attack with a significant amplification factor.
Why it matters now
Exploitation Active In CISA KEV since 2023-11-08CISA due date 2023-11-29
EPSS 0.63975 99th percentileScored 2026-11-07
Public exploit Yes 2 exploit referencesTagged by NVD
Fix Will not fix Red Hat: no fix planned
SSVC decision points
CISA ADP · SSVC 2.0.3
- Exploitation
- Active
- Automatable
- Yes
- Technical impact
- Partial
The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| — | — | all versions | — | No fix listed | CNA |
- — Vendor— Affected all versions Fixed in — No fix listed CNA
CPE configurations NVD · 9
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:a:netapp:smi-s_provider:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | NetApp |
| cpe:2.3:a:suse:manager_server:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | SUSE |
| cpe:2.3:o:suse:linux_enterprise_server:11:-:*:*:*:*:*:* | 11 | Vulnerable | SUSE |
| cpe:2.3:o:suse:linux_enterprise_server:12:-:*:*:*:*:*:* | 12 | Vulnerable | SUSE |
| cpe:2.3:o:suse:linux_enterprise_server:12:-:*:*:*:sap:*:* | 12 | Vulnerable | SUSE |
| cpe:2.3:o:suse:linux_enterprise_server:15:*:*:*:*:-:*:* | 15 | Vulnerable | SUSE |
| cpe:2.3:o:suse:linux_enterprise_server:15:*:*:*:*:sap:*:* | 15 | Vulnerable | SUSE |
| cpe:2.3:o:vmware:esxi:*:*:*:*:*:*:*:* | before 7.0 | Vulnerable | VMware |
| cpe:2.3:a:service_location_protocol_project:service_location_protocol:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Service Location Protocol Project |
- cpe:2.3:a:netapp:smi-s_provider:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·NetApp
- cpe:2.3:a:suse:manager_server:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·SUSE
- cpe:2.3:o:suse:linux_enterprise_server:11:-:*:*:*:*:*:* Versions 11 Vulnerable ·SUSE
- cpe:2.3:o:suse:linux_enterprise_server:12:-:*:*:*:*:*:* Versions 12 Vulnerable ·SUSE
- cpe:2.3:o:suse:linux_enterprise_server:12:-:*:*:*:sap:*:* Versions 12 Vulnerable ·SUSE
- cpe:2.3:o:suse:linux_enterprise_server:15:*:*:*:*:-:*:* Versions 15 Vulnerable ·SUSE
- cpe:2.3:o:suse:linux_enterprise_server:15:*:*:*:*:sap:*:* Versions 15 Vulnerable ·SUSE
- cpe:2.3:o:vmware:esxi:*:*:*:*:*:*:*:* Versions before 7.0 Vulnerable ·VMware
- cpe:2.3:a:service_location_protocol_project:service_location_protocol:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Service Location Protocol Project
Remediation
No fixed version listed by the sources yet.
Vendor assessments
Red Hat
Red Hat rating: Important. Red Hat's page for this CVE →
| Product | Status | Plan or fix |
|---|---|---|
| Red Hat Enterprise Linux 6 | Affected | No fix planned: Out of support scope |
| Red Hat Enterprise Linux 7 | Affected | No fix planned: Will not fix |
| Red Hat Enterprise Linux 9 | Affected | No fix planned: Will not fix |
Not affected: 1 product
- Red Hat Enterprise Linux 8
Timeline
- 2023-11-08 Added to CISA KEV
- 2026-10-02 Threatist record created from CVE-2023-29552
- 2026-10-03 Alias added: GHSA-288r-5qm5-qp55
References
Exploit 2
Advisory 4
- https://blogs.vmware.com/security/2023/04/vmware-response-to-cve-2023-29552-reflective-denial-of-service-dos-amplification-vulnerability-in-slp.html
- https://www.cisa.gov/news-events/alerts/2023/04/25/abuse-service-location-protocol-may-lead-dos-attacks
- https://www.suse.com/support/kb/doc/?id=000021051
- https://security.netapp.com/advisory/ntap-20230426-0001/
More IETF vulnerabilities
- TI-2023-23979 The HTTP/2 protocol allows a denial of service (server resource consumption) because… KEVCVSS 3.1HIGH 7.5
- TI-2004-02631 The MD5 Message-Digest Algorithm is not collision resistant, which makes it easier for… CVSS 3.1CRITICAL 9.8
- TI-2024-03351 RADIUS Protocol under RFC2865 is vulnerable to forgery attacks. CVSS 3.1CRITICAL 9.0
- TI-2020-08191 IP-in-IP protocol allows a remote, unauthenticated attacker to route arbitrary network traffic CVSS 3.1MEDIUM 5.3
- TI-2016-08218 An issue was discovered in the IPv6 protocol specification, related to ICMP Packet Too… CVSS 3.0HIGH 8.6
- TI-2007-02160 The IPv6 protocol allows remote attackers to cause a denial of service via crafted IPv6… CVSS 2.0HIGH 7.8
Sources
- CVE-2023-29552 · CVE Program
- CVE-2023-29552 · NVD
- CISA Known Exploited Vulnerabilities
- FIRST EPSS
- GHSA-288r-5qm5-qp55 · GitHub Advisory Database · CC BY 4.0
- CVE-2023-29552 · Red Hat security data · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences