# CVE-2023-29552: Service Location Protocol (SLP) Denial-of-Service Vulnerability

> CVE-2023-29552: Service Location Protocol (SLP) Denial-of-Service Vulnerability. CVSS 7.5 (CVSS 3.1), in CISA KEV.

Canonical: https://rewindex.com/cve/CVE-2023-29552
Last updated: 2025-10-21T23:05:48Z

- Published: 2023-04-25 00:00 UTC · Updated: 2025-10-21 23:05 UTC · Assigner: mitre
- CVSS: 7.5 (CVSS 3.1) · Severity: High · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
- EPSS: 64.0%, 99th percentile (scored 2026-10-25)
- CISA KEV: yes, added 2023-11-08, federal due date 2023-11-29, ransomware use: Unknown

## Description

The Service Location Protocol (SLP, RFC 2608) allows an unauthenticated, remote attacker to register arbitrary services. This could allow the attacker to use spoofed UDP traffic to conduct a denial-of-service attack with a significant amplification factor.

## CISA required action

Apply mitigations per vendor instructions or disable SLP service or port 427/UDP on all systems running on untrusted networks, including those directly connected to the Internet.

## Affected vendors and products

- IETF: Service Location Protocol (SLP)

## References

- [CVE record on cve.org](https://www.cve.org/CVERecord?id=CVE-2023-29552)
- [NVD entry](https://nvd.nist.gov/vuln/detail/CVE-2023-29552)
- [https://blogs.vmware.com/security/2023/04/vmware-response-to-cve-2023-29552-reflective-denial-of-service-dos-amplification-vulnerability-in-slp.html](https://blogs.vmware.com/security/2023/04/vmware-response-to-cve-2023-29552-reflective-denial-of-service-dos-amplification-vulnerability-in-slp.html)
- [https://curesec.com/blog/article/CVE-2023-29552-Service-Location-Protocol-Denial-of-Service-Amplification-Attack-212.html](https://curesec.com/blog/article/CVE-2023-29552-Service-Location-Protocol-Denial-of-Service-Amplification-Attack-212.html)
- [https://datatracker.ietf.org/doc/html/rfc2608](https://datatracker.ietf.org/doc/html/rfc2608)
- [https://github.com/curesec/slpload](https://github.com/curesec/slpload)
- [https://security.netapp.com/advisory/ntap-20230426-0001/](https://security.netapp.com/advisory/ntap-20230426-0001/)
- [https://www.bitsight.com/blog/new-high-severity-vulnerability-cve-2023-29552-discovered-service-location-protocol-slp](https://www.bitsight.com/blog/new-high-severity-vulnerability-cve-2023-29552-discovered-service-location-protocol-slp)
- [https://www.cisa.gov/news-events/alerts/2023/04/25/abuse-service-location-protocol-may-lead-dos-attacks](https://www.cisa.gov/news-events/alerts/2023/04/25/abuse-service-location-protocol-may-lead-dos-attacks)
- [https://www.suse.com/support/kb/doc/?id=000021051](https://www.suse.com/support/kb/doc/?id=000021051)

---

_Sources: CVE records from the CVE Program (cve.org). CVE® is a registered trademark of The MITRE Corporation. (https://www.cve.org/) This product uses data from the NVD API but is not endorsed or certified by the NVD. (https://nvd.nist.gov/) Known Exploited Vulnerabilities catalog from CISA. (https://www.cisa.gov/known-exploited-vulnerabilities-catalog) EPSS scores from FIRST (Exploit Prediction Scoring System). (https://www.first.org/epss/)_


---
Canonical: https://rewindex.com/cve/CVE-2023-29552 · Markdown: https://rewindex.com/cve/CVE-2023-29552.md · JSON: https://rewindex.com/api/v1/cves/CVE-2023-29552 · Data licensed CC BY 4.0 (https://creativecommons.org/licenses/by/4.0/) · Generated 2026-10-26T02:13:25.072Z