CVE-2023-29552

No fix known ExploitedEPSS 64%CVSS 7.5

The Service Location Protocol (SLP, RFC 2608) allows an unauthenticated, remote attacker to register arbitrary services. This could allow the attacker to use spoofed UDP traffic to conduct a denial-of-service attack with a significant amplification factor.

Published 2023-04-25 · In CISA KEV since 2023-11-08 · CVE record · OSV

Products: netapp smi-s_provider, suse manager_server, suse linux_enterprise_server, vmware esxi, service_location_protocol_project service_location_protocol

Distro releases