imPC@ndo IT

Tracker / CVE-2023-29552

CVE-2023-29552

Exploited High 7.5

The Service Location Protocol (SLP, RFC 2608) allows an unauthenticated, remote attacker to register arbitrary services. This could allow the attacker to use spoofed UDP traffic to conduct a denial-of-service attack with a significant amplification factor.

Affected products and versions

netapp smi-s_provider
service_location_protocol_project service_location_protocol
suse linux_enterprise_server
suse manager_server
vmware esxi · … → 7.0

Analysis

This page is not indexable yet.Until it carries original analysis — what it actually exposes, how to check in two minutes whether a system was touched, what to do if it was — the page stays noindex. The database decides that, not the template.

References