ZDF
Sign inSign up

Vulnerabilities

Vulnerability · CVE-2023-29552

Service Location Protocol (SLP) Denial-of-Service Vulnerability

Published Apr 25, 2023 · catalog updated Jun 16, 2026 · IETF Service Location Protocol (SLP)

Patch now

CVE-2023-29552 is in the CISA known-exploited catalog, due Nov 29, 2023. Confirm IETF Service Location Protocol (SLP) against the vendor advisory and apply that fix. The CVSS score does not change the priority.

Gaps on this record

  • No version range is stored. A customer cannot check an installed version against this record.
Severity
High7.5
Known exploitation
CISA KEV and VulnCheck KEV
EPSS
63.98%
Remediation
Remediation guidance
Affected products
cpe netapp/smi-s provider · cpe service location protocol project/service location protocol · cpe suse/linux enterprise server · cpe suse/manager server · cpe vmware/esxi · vendor IETF Service Location Protocol (SLP)

The Service Location Protocol (SLP) contains a denial-of-service (DoS) vulnerability that could allow an unauthenticated, remote attacker to register services and use spoofed UDP traffic to conduct a denial-of-service (DoS) attack with a significant amplification factor.

Are you affected?

Enter the version you run. The result uses only the ranges stored on this record.

The check returns affected, not affected, or incomplete. It does not guess a version that is missing from the record.

  • cpe netapp/smi-s providerversion unspecified
  • cpe service location protocol project/service location protocolversion unspecified
  • cpe suse/linux enterprise server11
  • cpe suse/linux enterprise server12
  • cpe suse/linux enterprise server15
  • cpe suse/manager serverversion unspecified
  • cpe vmware/esxiversion unspecified
  • vendor IETF Service Location Protocol (SLP)version unspecified

How to fix CVE-2023-29552

What to do

Three questions, each answered from this record only. Confirm the vendor advisory before you patch.

Should you patch?

CVE-2023-29552 is in the CISA known-exploited catalog, due Nov 29, 2023. Confirm IETF Service Location Protocol (SLP) against the vendor advisory and apply that fix. The CVSS score does not change the priority.

Which versions are affected?

Compare what you have installed with suse/linux enterprise server 11; suse/linux enterprise server 12; suse/linux enterprise server 15. Apply mitigations per vendor instructions or disable SLP service or port 427/UDP on all systems running on untrusted networks, including those directly connected to the Internet.

What should an analyst verify?

No weakness class is stored. EPSS 63.98%. The CISA KEV listing is the exploitation evidence. No Exploit-DB or Metasploit reference is linked. Use the source links for the original advisory.

Code

The project this record applies to. Exploit listings stay in References.

Timeline

Detection, updates, and resolution for this record.

  1. Apr 25, 2023 · Catalog

    Detected

    The Service Location Protocol (SLP) contains a denial-of-service (DoS) vulnerability that could allow an unauthenticated, remote attacker to register services and use spoofed UDP traffic to conduct a denial-of-service (DoS) attack with a significant amplification factor.

  2. Nov 8, 2023 · CISA KEV

    Known exploited

    Apply mitigations per vendor instructions or disable SLP service or port 427/UDP on all systems running on untrusted networks, including those directly connected to the Internet.

  3. Nov 29, 2023 · CISA KEV

    Remediation due

    Apply mitigations per vendor instructions or disable SLP service or port 427/UDP on all systems running on untrusted networks, including those directly connected to the Internet.

  4. Jun 16, 2026 · Catalog

    Updated

    The Service Location Protocol (SLP) contains a denial-of-service (DoS) vulnerability that could allow an unauthenticated, remote attacker to register services and use spoofed UDP traffic to conduct a denial-of-service (DoS) attack with a significant amplification factor.

Sources

  • CISA KEVConfirmed exploitationCVE-2023-29552

    The Service Location Protocol (SLP) contains a denial-of-service (DoS) vulnerability that could allow an unauthenticated, remote attacker to register services and use spoofed UDP traffic to conduct a denial-of-service (DoS) attack with a significant amplification factor.

    cisa.gov
  • CVE.orgVulnerability recordCVE-2023-29552

    Official CVE identifier

    cve.org
  • FIRST EPSSExploitation probabilityCVE-2023-29552

    30-day exploitation probability 64.0%

    first.org
  • NIST NVDVulnerability recordCVE-2023-29552

    The Service Location Protocol (SLP, RFC 2608) allows an unauthenticated, remote attacker to register arbitrary services. This could allow the attacker to use spoofed UDP traffic to conduct a denial-of-service attack with a significant amplification factor.

    nvd.nist.gov
  • VulnCheck KEVConfirmed exploitationCVE-2023-29552

    The Service Location Protocol (SLP) contains a denial-of-service (DoS) vulnerability that could allow an unauthenticated, remote attacker to register services and use spoofed UDP traffic to conduct a denial-of-service (DoS) attack with a significant amplification factor.

    vulncheck.com

References

Freshness

Last verified in this catalog Oct 17, 2026. Significant claims (KEV, EPSS, CVSS, affected ranges) come from the source rows above — open the original publisher for the authoritative advisory.