CVE-2023-29552: Service Location Protocol (SLP) Denial-of-Service Vulnerability
Vulnerability summary
CVE-2023-29552 is a high (CVSS 7.5) vulnerability in IETF Service Location Protocol (SLP). It is known to be exploited: CISA lists it, first on 08-11-2023. EPSS estimates a 63.98% chance of exploitation in the next 30 days, higher than 99.2% of scored vulnerabilities. 2 public exploits are recorded.
Timeline
- 25-04-2023PublishedVulnerability first disclosed.
- 08-11-2023Added to CISA KEVService Location Protocol (SLP) Denial-of-Service Vulnerability
- 29-11-2023CISA remediation dueApply mitigations per vendor instructions.
- 21-10-2025Last modifiedVulnerability information updated.
Description
The Service Location Protocol (SLP, RFC 2608) allows an unauthenticated, remote attacker to register arbitrary services. This could allow the attacker to use spoofed UDP traffic to conduct a denial-of-service attack with a significant amplification factor.
CVSS metrics
3 scores · 3 sources · 1 version- OSV · UbuntuEcosystem advisory · calculated7.5HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
- NVDNIST7.5HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
EPSS trend
Probability
63.98%
Chance of exploitation in the next 30 days
Percentile
99%
Versus all other CVEs
30-day change
-1.90 pp
From 65.87% on 18-09-2026
Known exploited
Compare KEV catalogs
CISA KEVListed- Added
- 08-11-2023
- Federal due date
- 29-11-2023
CISA required action
Apply mitigations per vendor instructions or disable SLP service or port 427/UDP on all systems running on untrusted networks, including those directly connected to the Internet. nvd.nist.gov/vuln/detail/CVE-2023-29552
Public exploits
2 foundExploit Reference (bitsight.com)
Maturity: unknown
Exploit Reference (curesec.com)
Maturity: unknown
Weaknesses
CWE · root causeNo weakness data has been published for this record.
Affected systems
Suse2 products
- linux_enterprise_server11 | 12 | 15
- manager_serverna
Netapp1 product
Service_location_protocol_project1 product
Ubuntu1 product
- openslp-dfsgAll versions (No fix recorded)
Vmware1 product
- esxi< 7.0
5 vendors · 6 products
References
13 links- datatracker.ietf.org/doc/html/rfc2608Technical Description
- blogs.vmware.com/security/…Third Party Advisory
- www.cisa.gov/news-events/alerts/2023/04/25/abuse-service-location-protocol-may-lead-dos-attacksThird Party AdvisoryUS Government Resource
- www.suse.com/support/kb/doc/?id=000021051Third Party Advisory
- github.com/curesec/slploadProduct
- security.netapp.com/advisory/ntap-20230426-0001/Third Party Advisory
- www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2023-29552Government ResourceUS Government Resource