Is CVE-2023-29552 exploitable?

Yes — CVE-2023-29552 is listed in the CISA Known Exploited Vulnerabilities (KEV) catalog, meaning it is confirmed exploited in the wild.

Is CVE-2023-29552 a false positive?

No practitioners have marked CVE-2023-29552 a false positive so far (3 verdicts).

How do I remediate CVE-2023-29552?

Practitioners have shared remediation steps for CVE-2023-29552 — see the remediation notes on this page.

CVE-2023-29552

is CVE-2023-29552real, exploitable, or a false positive? Here's the community ground truth.

☆ Watch

High · CVSS 7.5EPSS 65.9%CISA KEV

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

The Service Location Protocol (SLP, RFC 2608) allows an unauthenticated, remote attacker to register arbitrary services. This could allow the attacker to use spoofed UDP traffic to conduct a denial-of-service attack with a significant amplification factor.

References

NVD MITRE CVE.org CISA KEV

Published Apr 25, 2023

Embed this verdict

Markdown

[![TruePositive verdict](https://www.truepositive.app/cve/CVE-2023-29552/badge.svg)](https://www.truepositive.app/cve/CVE-2023-29552)

HTML

<a href="https://www.truepositive.app/cve/CVE-2023-29552"><img src="https://www.truepositive.app/cve/CVE-2023-29552/badge.svg" alt="TruePositive verdict for CVE-2023-29552"></a>

Live badge — updates automatically as the community verdict changes.

Community ground truth

Community verdict

3 verdicts

Not a real issue

Includes TruePositive's curated baseline from public sources — community verdicts accrue on top.

Pick your verdict — we'll save it right after a quick sign-in.

Community real-world severity: High (High 3) — CVSS base score 7.5

In line with its CVSS base score.

Field notes & remediation

Verdicts are the quick signal — notes are the evidence and fixes behind them.

0
Field note · Aisha RahmanCurated
Service Location Protocol (SLP) Denial-of-Service Vulnerability — The Service Location Protocol (SLP) contains a denial-of-service (DoS) vulnerability that could allow an unauthenticated, remote attacker to register services and use spoofed UDP traffic to conduct a denial-of-service (DoS) attack with a significant amplification factor. Listed in the CISA KEV catalog (added 2023-11-08) — confirmed exploited in the wild, not theoretical. FIRST EPSS puts the chance of exploitation in the next 30 days at ~66%. Treat it as real and prioritize remediation over triage.
0
Remediation · Tomáš NovákCurated
Required action for IETF Service Location Protocol (SLP): Apply mitigations per vendor instructions or disable SLP service or port 427/UDP on all systems running on untrusted networks, including those directly connected to the Internet. CISA set a federal remediation due date of 2023-11-29. After patching, verify the vulnerable path is no longer reachable before closing the finding.