7.5Hoch KEV

CVE-2023-29552Service Location Protocol (SLP) Denial-of-Service Vulnerability

netapp smi-s provider; suse manager server; suse linux enterprise server; vmware esxi Veröffentlicht: 2023-04-25 03:00 (vor 3 Jahren)

Bekannt ausgenutzt — Service Location Protocol (SLP) Denial-of-Service Vulnerability

CISA hat am 08.11.2023 bestätigt, dass diese Schwachstelle in echten Angriffen genutzt wird. Frist für US-Bundesbehörden: 29.11.2023.

Erforderliche Maßnahme: Apply mitigations per vendor instructions or disable SLP service or port 427/UDP on all systems running on untrusted networks, including those directly connected to the Internet. This vulnerability affects a common open-source component, third-party library, or a protocol used by different products. Please check with specific vendors for information on the patching status. For more information please see https://www.bitsight.com/blog/new-high-severity-vulnerability-cve-2023-29552-discovered-service-location-protocol-slp and https://www.cisa.gov/news-events/alerts/2023/04/25/abuse-service-location-protocol-may-lead-dos-attacks.; https://nvd.nist.gov/vuln/detail/CVE-2023-29552

Beschreibung

The Service Location Protocol (SLP, RFC 2608) allows an unauthenticated, remote attacker to register arbitrary services. This could allow the attacker to use spoofed UDP traffic to conduct a denial-of-service attack with a significant amplification factor.

Daten: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Wiedergegeben wie in der Quelle, auf Englisch.

Betroffene Produkte und Versionen

Hersteller	Produkt	Versionen
netapp	smi-s provider	—
service location protocol project	service location protocol	—
suse	linux enterprise server	11
suse	manager server	—
vmware	esxi	< 7.0

Referenzen und Patches

https://datatracker.ietf.org/doc/html/rfc2608 Technical Description
https://www.bitsight.com/blog/new-high-severity-vulnerability-cve-2023-29552-discovered-service-location-prot… ExploitThird Party Advisory
https://blogs.vmware.com/security/2023/04/vmware-response-to-cve-2023-29552-reflective-denial-of-service-dos-… Third Party Advisory
https://www.cisa.gov/news-events/alerts/2023/04/25/abuse-service-location-protocol-may-lead-dos-attacks Third Party AdvisoryUS Government Resource
https://www.suse.com/support/kb/doc/?id=000021051 Third Party Advisory
https://curesec.com/blog/article/CVE-2023-29552-Service-Location-Protocol-Denial-of-Service-Amplification-Att… ExploitThird Party Advisory
https://github.com/curesec/slpload Product
https://security.netapp.com/advisory/ntap-20230426-0001/ Third Party Advisory
https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2023-29552 US Government Resource

CPE-Treffer (NVD) (9)

cpe:2.3:a:netapp:smi-s_provider:-:*:*:*:*:*:*:*
cpe:2.3:a:suse:manager_server:-:*:*:*:*:*:*:*
cpe:2.3:o:suse:linux_enterprise_server:11:-:*:*:*:*:*:*
cpe:2.3:o:suse:linux_enterprise_server:12:-:*:*:*:*:*:*
cpe:2.3:o:suse:linux_enterprise_server:12:-:*:*:*:sap:*:*
cpe:2.3:o:suse:linux_enterprise_server:15:*:*:*:*:-:*:*
cpe:2.3:o:suse:linux_enterprise_server:15:*:*:*:*:sap:*:*
cpe:2.3:o:vmware:esxi:*:*:*:*:*:*:*:* < 7.0
cpe:2.3:a:service_location_protocol_project:service_location_protocol:-:*:*:*:*:*:*:*

CVSS-Score

7.5Hoch

Quelle: CISA-ADP · CVSS 3.1

Angriffsvektor: Netzwerk
Komplexität: Niedrig
Rechte erforderlich: Keine
Benutzerinteraktion: Keine
Geltungsbereich: Unverändert
Vertraulichkeit: Keine
Integrität: Keine
Verfügbarkeit: Hoch

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Alle Scores (3)

CISA-ADP	CVSS 3.1	7.5Hoch
nvd	CVSS 3.1	7.5Hoch
134c704f-9b21-4f2e-91b3-4a467353bcc0	CVSS 3.1	7.5Hoch

EPSS (Ausnutzungswahrscheinlichkeit in 30 Tagen)

63.98%

höher als 99 % aller CVEs

CISA-Bewertung (SSVC)

Ausnutzung: active
Automatisierbar: yes
Technische Auswirkung: partial

Zeitverlauf

ID reserviert2023-04-07
Veröffentlicht2023-04-25 03:00
Bei IP-DB eingegangen2026-10-24 23:31
In KEV aufgenommen2023-11-08
Zuletzt aktualisiert2026-06-17 08:50

Vergeben von (CNA): mitre
NVD-Status: Analyzed

In der Quelle ansehen: CVE.org · NVD

Benachrichtigung bei neuen Schwachstellen in diesen Produkten

E-Mail-Warnungen aktivieren

Kostenlos · mit Konto · jederzeit abbestellbar

Neue CVEs im selben Produkt — VMware ESXi / vCenter

2.7Niedrig

CVE-2026-41709 KEV vor 3 Monaten

ESX insufficient logging vulnerability

VMware Cloud Foundation; VMware vSphere Foundation; VMware ESX; VMware Telco Cloud Platform

VMware ESX contains an insufficient logging vulnerability. A malicious administrator could exploit this issue to perform certain operations without them being logged.

7.6Hoch

CVE-2026-41703 vor 3 Monaten

Out-of-bounds read vulnerability

VMware Cloud Foundation; VMware vSphere Foundation; VMware ESX; VMware Workstation

VMware ESX, Workstation, and Fusion contain an out-of-bounds read vulnerability. A malicious actor with VM deployment privileges could trigger an out-of-bounds read, potentially leading to information disclosure or more likely a Denial-of-Service (DoS) condit…

9.3Kritisch

CVE-2026-47876 vor 3 Monaten

VMXNET3 out-of-bounds write vulnerability

VMware Cloud Foundation; VMware vSphere Foundation; VMware ESX; VMware Telco Cloud Platform

VMware ESX contains an out-of-bounds write vulnerability in the VMXNET3 virtual network adapter. A malicious actor with local administrative privileges on a virtual machine with VMXNET3 virtual network adapter may exploit this issue to execute code on the hos…

9.8Kritisch

CVE-2026-59309 vor 3 Monaten

vCenter authentication-bypass vulnerability

VMware Cloud Foundation; VMware vSphere Foundation; VMware vCenter; VMware Telco Cloud Infrastructure

VMware vCenter contains an authentication bypass vulnerability in the VMware Directory Service. A malicious actor with network access to vCenter may exploit this issue to bypass authentication and gain unauthorized access to the system.

9.8Kritisch

CVE-2026-59310 KEV In Ransomware genutzt vor 3 Monaten

vCenter directory-traversal vulnerability

VMware Cloud Foundation; VMware vSphere Foundation; VMware vCenter; VMware Telco Cloud Infrastructure

VMware vCenter contains a directory traversal vulnerability in the Syslog server. A malicious actor with network access to vCenter may exploit this issue to execute arbitrary code.

62%EPSS

8.0Hoch

CVE-2026-41724 vor 5 Monaten

VMSA-2026-0004: VMware Cloud Foundation Operations updates address multiple vulnerabilities (CVE-2026-41722, CVE-2026-41723 and CVE-2026-41724)

VMware VCF operations; VMware VMware Aria Operations; VMware VMware Telco Cloud Platform

VMware Cloud Foundation Operations contains multiple stored cross-site scripting vulnerabilities.A malicious actor with privileges to create policies, views or text-widgets may be able to inject scripts to perform administrative actions in VMware Cloud Founda…