PT-2023-2519 · Unknown · Service Location Protocol

Marco Lux + 1 · Published 2023-04-24 · Updated 2025-10-31 · CVE-2023-29552

Positive Technologies (AI Summary)

CVSS v2.0

7.8

High

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Service Location Protocol (SLP) (affected versions not specified)

Description The Service Location Protocol (SLP) allows an unauthenticated, remote attacker to register arbitrary services. This could allow the attacker to use spoofed UDP traffic to conduct a denial-of-service attack with a significant amplification factor. The vulnerability is being actively exploited to launch massive DoS amplification attacks. Approximately 54,000 vulnerable devices in 2,000 organizations have been identified.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability. As a temporary workaround, consider disabling the Service Location Protocol (SLP) on systems operating in untrusted networks to minimize the risk of exploitation. Restrict access to SLP services to prevent unauthorized registration of services. Avoid using SLP for critical services until the issue is resolved. Mitigations are required by November 29, 2023.

Exploit

Weakness Enumeration

CWE-406

Related Identifiers

BDU:2023-02317

CVE-2023-29552

Affected Products

Service Location Protocol

References · 65

• 🔥 https://bitsight.com/blog/new-high-severity-vulnerability-cve-2023-29552-discovered-service-location-protocol-slp · Exploit
• 🔥 https://curesec.com/blog/article/CVE-2023-29552-Service-Location-Protocol-Denial-of-Service-Amplification-Attack-212.html · Exploit
• https://bdu.fstec.ru/vul/2023-02317 · Security Note
• https://ubuntu.com/security/CVE-2023-29552 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2023-29552 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2023-29552 · Security Note
• https://osv.dev/vulnerability/CVE-2023-29552 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-29552 · Security Note
• https://github.com/curesec/slpload · Note
• https://twitter.com/ColorTokensInc/status/1722841540278587622 · Twitter Post
• https://cisa.gov/sites/default/files/csv/known_exploited_vulnerabilities.csv · Note
• https://twitter.com/XynikIT/status/1722564269412175989 · Twitter Post
• https://twitter.com/CyberxtronTech/status/1722484324900172224 · Twitter Post
• https://twitter.com/fridaysecurity/status/1722305468687626436 · Twitter Post
• https://twitter.com/Komodosec/status/1722346646217101405 · Twitter Post