CVE-2023-29552

Опубликовано: 25 апр. 2023

Источник: nvd

CVSS3: 7.5

EPSS Критический

Описание

The Service Location Protocol (SLP, RFC 2608) allows an unauthenticated, remote attacker to register arbitrary services. This could allow the attacker to use spoofed UDP traffic to conduct a denial-of-service attack with a significant amplification factor.

Ссылки

https://blogs.vmware.com/security/2023/04/vmware-response-to-cve-2023-29552-reflective-denial-of-service-dos-amplification-vulnerability-in-slp.html
Third Party Advisory
https://curesec.com/blog/article/CVE-2023-29552-Service-Location-Protocol-Denial-of-Service-Amplification-Attack-212.html
Exploit
Third Party Advisory
https://datatracker.ietf.org/doc/html/rfc2608
Technical Description
https://github.com/curesec/slpload
Product
https://security.netapp.com/advisory/ntap-20230426-0001/
Third Party Advisory
https://www.bitsight.com/blog/new-high-severity-vulnerability-cve-2023-29552-discovered-service-location-protocol-slp
Exploit
Third Party Advisory
https://www.cisa.gov/news-events/alerts/2023/04/25/abuse-service-location-protocol-may-lead-dos-attacks
Third Party Advisory
US Government Resource
https://www.suse.com/support/kb/doc/?id=000021051
Third Party Advisory
https://blogs.vmware.com/security/2023/04/vmware-response-to-cve-2023-29552-reflective-denial-of-service-dos-amplification-vulnerability-in-slp.html
Third Party Advisory
https://curesec.com/blog/article/CVE-2023-29552-Service-Location-Protocol-Denial-of-Service-Amplification-Attack-212.html
Exploit
Third Party Advisory
https://datatracker.ietf.org/doc/html/rfc2608
Technical Description
https://github.com/curesec/slpload
Product
https://security.netapp.com/advisory/ntap-20230426-0001/
Third Party Advisory
https://www.bitsight.com/blog/new-high-severity-vulnerability-cve-2023-29552-discovered-service-location-protocol-slp
Exploit
Third Party Advisory
https://www.cisa.gov/news-events/alerts/2023/04/25/abuse-service-location-protocol-may-lead-dos-attacks
Third Party Advisory
US Government Resource
https://www.suse.com/support/kb/doc/?id=000021051
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:netapp:smi-s_provider:-:*:*:*:*:*:*:*

Конфигурация 2

Одно из

cpe:2.3:a:suse:manager_server:-:*:*:*:*:*:*:*

cpe:2.3:o:suse:linux_enterprise_server:11:-:*:*:*:*:*:*

cpe:2.3:o:suse:linux_enterprise_server:12:-:*:*:*:*:*:*

cpe:2.3:o:suse:linux_enterprise_server:12:-:*:*:*:sap:*:*

cpe:2.3:o:suse:linux_enterprise_server:15:*:*:*:*:-:*:*

cpe:2.3:o:suse:linux_enterprise_server:15:*:*:*:*:sap:*:*

Конфигурация 3

cpe:2.3:o:vmware:esxi:*:*:*:*:*:*:*:*

Версия до 7.0 (исключая)

Конфигурация 4

cpe:2.3:a:service_location_protocol_project:service_location_protocol:-:*:*:*:*:*:*:*

EPSS

Процентиль: 100%

0.93709

Критический

7.5 High

CVSS3

Дефекты

NVD-CWE-noinfo

Связанные уязвимости

CVE-2023-29552

CVSS3: 7.5

ubuntu

больше 2 лет назад

CVE-2023-29552

CVSS3: 7.5

redhat

больше 2 лет назад

GHSA-288r-5qm5-qp55

CVSS3: 7.5

github

больше 2 лет назад

BDU:2023-02317

CVSS3: 8.6

fstec

больше 2 лет назад

Уязвимость реализации протокола определения местоположения SLP, связанная с недостаточным контролем объема передаваемых сетевых сообщений, позволить нарушителю, действующему удалённо, вызвать отказ в обслуживании путём регистрации произвольных служб для создания поддельного UDP-трафика

EPSS

Процентиль: 100%

0.93709

Критический

7.5 High

CVSS3

Дефекты

NVD-CWE-noinfo