CVE-2023-29552

Known Exploited Vulnerability

Service Location Protocol (SLP) Denial-of-Service Vulnerability

Vendor / product: IETF / Service Location Protocol (SLP)

Description

The Service Location Protocol (SLP, RFC 2608) allows an unauthenticated, remote attacker to register arbitrary services. This could allow the attacker to use spoofed UDP traffic to conduct a denial-of-service attack with a significant amplification factor.

Weakness classification

• nvd@nist.gov: NVD-CWE-noinfo

Primary references

• cve@mitre.org — Third Party Advisory
• cve@mitre.org — Exploit, Third Party Advisory
• cve@mitre.org — Technical Description
• cve@mitre.org — Product
• cve@mitre.org — Third Party Advisory
• cve@mitre.org — Exploit, Third Party Advisory
• cve@mitre.org — Third Party Advisory, US Government Resource
• cve@mitre.org — Third Party Advisory
• af854a3a-2127-422b-91ae-364da2661108 — Third Party Advisory
• af854a3a-2127-422b-91ae-364da2661108 — Exploit, Third Party Advisory
• af854a3a-2127-422b-91ae-364da2661108 — Technical Description
• af854a3a-2127-422b-91ae-364da2661108 — Product