PatchTheCVECVE-2023-29552: Service Location Protocol (SLP) Denial-of-Service Vulnerability
CVE-2023-29552 is a high-severity flaw (CVSS 7.5) affecting smi-s provider, manager server, linux enterprise server, reported as exploited in the wild. Below: why it ranks where it does, which versions are affected, what to do, and the exact commands.
The Service Location Protocol (SLP, RFC 2608) allows an unauthenticated, remote attacker to register arbitrary services. This could allow the attacker to use spoofed UDP traffic to conduct a denial-of-service attack with a significant amplification factor.
Why this priority
- High severity
- EPSS top 1%: very likely to be exploited
- Exploited in the wild (CISA KEV)
- Public exploit reference
- Remotely exploitable, no login, no user action
- On your watchlist
A fixed release or distro patch exists.
Risk facts
| CVSS score | 7.5 (High) |
| Attack vector | Network (remote) |
| Attack complexity | Low |
| Privileges needed | None |
| User interaction | None |
| EPSS exploit chance | 64.0% (top 1%) |
| CISA exploited list | Yes, fix due 2023-11-29 |
| Published | 2023-04-25 |
| Last modified | 2026-06-17 |
Last updated 2026-06-17 · Sources: CVE Program, NVD, CISA KEV, EPSS and vendor advisories · How we score
Am I affected?
Timeline
- Published CVE record published
- Exploited Added to the CISA Known Exploited Vulnerabilities list
- Deadline CISA due date for US federal agencies to patch
- Updated Record last modified
Exact fixes by distribution
Public exploits and detection
Public code exists for this CVE. Treat unpatched systems as at risk, and only run PoCs in a lab.
- Write-up: www.bitsight.com/blog/new-high-severity-vulnerability-cve-2023-29552-discovered-service-lo
Scores and fixes here are computed automatically from those and other public sources. Confirm with the vendor advisory before changing production systems.
Quick answers
How do I fix CVE-2023-29552?
smi-s provider: mitigate or apply the listed mitigation; manager server: mitigate or apply the listed mitigation; linux enterprise server: mitigate or apply the listed mitigation. Exact commands for each OS are on this page.
Is CVE-2023-29552 being exploited?
Yes. CVE-2023-29552 is on the CISA Known Exploited Vulnerabilities list, so treat it as patch-now.
What does CVE-2023-29552 affect?
CVE-2023-29552 affects smi-s provider, manager server, linux enterprise server. Severity is high (CVSS 7.5). The Service Location Protocol (SLP, RFC 2608) allows an unauthenticated, remote attacker to register arbitrary services. This could allow the attacker to use spoofed UDP traffic to conduct a denial-of-service attack with a significant ampli
How urgent is CVE-2023-29552?
Priority 91/100. High severity; EPSS top 1%: very likely to be exploited; Exploited in the wild (CISA KEV); Public exploit reference; Remotely exploitable, no login, no user action; On your watchlist
Software pages
Related CVEs
- CVE-2022-40304 HIGH 7.8 UPGRADE MITIGATE An issue was discovered in libxml2 before 2.10.3
- CVE-2022-1473 HIGH 7.5 UPGRADE MITIGATE The OPENSSL_LH_flush() function, which empties a hash table, contains a bug that breaks reuse of the memory oc
- CVE-2022-1434 MEDIUM 5.9 UPGRADE MITIGATE The OpenSSL 3.0 implementation of the RC4-MD5 ciphersuite incorrectly uses the AAD data as the MAC key
- CVE-2022-1343 MEDIUM 5.3 UPGRADE MITIGATE The function `OCSP_basic_verify` verifies the signer certificate on an OCSP response
- CVE-2020-15862 HIGH 7.8 UPGRADE MITIGATE Net-SNMP through 5.8 has Improper Privilege Management because SNMP WRITE access to the EXTEND MIB provides th