Live › vulnerability › CVE-2023-29552
Go to dashboardThe IETF Service Location Protocol (SLP) lets an unauthenticated remote attacker register services and abuse spoofed UDP traffic to run a denial-of-service attack with a large amplification factor. Attackers can use exposed SLP hosts to flood a victim with much more traffic than they send.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 19:11 UTC, 3h before NVD. All times on this page are UTC.
Apply mitigations per vendor instructions or disable SLP service or port 427/UDP on all systems running on untrusted networks, including those directly connected to the Internet.
| Product | Ecosystem | Affected | Fixed in |
|---|---|---|---|
| IETF Service Location Protocol (SLP) | vendor | – | – |
| netapp smi-s provider | vendor | – | – |
| suse manager server | vendor | – | – |
| suse linux enterprise server | vendor | = 11 | – |
| suse linux enterprise server | vendor | = 12 | – |
| suse linux enterprise server | vendor | = 15 | – |
| vmware esxi | vendor | < 7.0 | 7.0 |
| service location protocol project service location protocol | vendor | – | – |
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
The Service Location Protocol (SLP) contains a denial-of-service (DoS) vulnerability that could allow an unauthenticated, remote attacker to register services and use spoofed UDP traffic to conduct a denial-of-service (DoS) attack with a significant amplification factor.
CISA required action: Apply mitigations per vendor instructions or disable SLP service or port 427/UDP on all systems running on untrusted networks, including those directly connected to the Internet.
This page as .md · .json · in your agent: get_signal("CVE-2023-29552")
CISA KEV catalog, Creative Commons 0 · NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.