CVE-2023-29552

The Service Location Protocol (SLP, RFC 2608) allows an unauthenticated, remote attacker to register arbitrary services. This could allow the attacker to use spoofed UDP traffic to conduct a denial-of-service attack with a significant amplification factor.

• https://blogs.vmware.com/security/2023/04/vmware-response-to-cve-2023-29552-reflective-denial-of-service-dos-amplification-vulnerability-in-slp.htmlThird Party Advisory
• https://curesec.com/blog/article/CVE-2023-29552-Service-Location-Protocol-Denial-of-Service-Amplification-Attack-212.htmlExploit, Third Party Advisory
• https://datatracker.ietf.org/doc/html/rfc2608Technical Description
• https://github.com/curesec/slploadProduct
• https://security.netapp.com/advisory/ntap-20230426-0001/Third Party Advisory
• https://www.bitsight.com/blog/new-high-severity-vulnerability-cve-2023-29552-discovered-service-location-protocol-slpExploit, Third Party Advisory
• https://www.cisa.gov/news-events/alerts/2023/04/25/abuse-service-location-protocol-may-lead-dos-attacksThird Party Advisory, US Government Resource
• https://www.suse.com/support/kb/doc/?id=000021051Third Party Advisory
• https://blogs.vmware.com/security/2023/04/vmware-response-to-cve-2023-29552-reflective-denial-of-service-dos-amplification-vulnerability-in-slp.htmlThird Party Advisory
• https://curesec.com/blog/article/CVE-2023-29552-Service-Location-Protocol-Denial-of-Service-Amplification-Attack-212.htmlExploit, Third Party Advisory
• https://datatracker.ietf.org/doc/html/rfc2608Technical Description
• https://github.com/curesec/slploadProduct
• https://security.netapp.com/advisory/ntap-20230426-0001/Third Party Advisory
• https://www.bitsight.com/blog/new-high-severity-vulnerability-cve-2023-29552-discovered-service-location-protocol-slpExploit, Third Party Advisory
• https://www.cisa.gov/news-events/alerts/2023/04/25/abuse-service-location-protocol-may-lead-dos-attacksThird Party Advisory, US Government Resource
• https://www.suse.com/support/kb/doc/?id=000021051Third Party Advisory
• https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2023-29552US Government Resource

Published

Apr 25, 2023

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-29547When a secure cookie existed in the Firefox cookie jar an in…6.5
• CVE-2023-29548A wrong lowering instruction in the ARM64 Ion compiler resul…6.5
• CVE-2023-29549Under certain circumstances, a call to the <code>bind</code>…6.5
• CVE-2023-2955A vulnerability, which was classified as critical, was found…9.8
• CVE-2023-29550Memory safety bugs present in Firefox 111 and Firefox ESR 10…8.8
• CVE-2023-29551Memory safety bugs present in Firefox 111. Some of these bug…8.8
• CVE-2023-29562TP-Link TL-WPA7510 (EU)_V2_190125 was discovered to contain …9.8
• CVE-2023-29566huedawn-tesseract 0.3.3 and dawnsparks-node-tesseract 0.4.0 …9.8
• CVE-2023-29569Cesanta MJS v2.20.0 was discovered to contain a SEGV vulnera…5.5
• CVE-2023-2957Improper Neutralization of Special Elements used in an SQL C…9.8
• CVE-2023-29570Cesanta MJS v2.20.0 was discovered to contain a SEGV vulnera…5.5
• CVE-2023-29571Cesanta MJS v2.20.0 was discovered to contain a SEGV vulnera…5.5