{"document":{"aggregate_severity":{"namespace":"https://access.redhat.com/security/updates/classification/","text":"Important"},"category":"csaf_vex","csaf_version":"2.0","distribution":{"text":"Copyright © Red Hat, Inc. All rights reserved.","tlp":{"label":"WHITE","url":"https://www.first.org/tlp/"}},"lang":"en","notes":[{"category":"legal_disclaimer","text":"This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.","title":"Terms of Use"}],"publisher":{"category":"vendor","contact_details":"https://access.redhat.com/security/team/contact/","issuing_authority":"Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.","name":"Red Hat Product Security","namespace":"https://www.redhat.com"},"references":[{"category":"self","summary":"Canonical URL","url":"https://security.access.redhat.com/data/csaf/v2/vex/2023/cve-2023-29552.json"}],"title":"openslp: Reflective denial of service amplification attack via UDP","tracking":{"current_release_date":"2025-11-21T13:55:45+00:00","generator":{"date":"2025-11-21T13:55:45+00:00","engine":{"name":"Red Hat SDEngine","version":"4.6.12"}},"id":"CVE-2023-29552","initial_release_date":"2023-04-25T00:00:00+00:00","revision_history":[{"date":"2023-04-25T00:00:00+00:00","number":"1","summary":"Initial version"},{"date":"2025-01-28T22:20:08+00:00","number":"2","summary":"Current version"},{"date":"2025-11-21T13:55:45+00:00","number":"3","summary":"Last generated version"}],"status":"final","version":"3"}},"product_tree":{"branches":[{"branches":[{"branches":[{"category":"product_name","name":"Red Hat Enterprise Linux 6","product":{"name":"Red Hat Enterprise Linux 6","product_id":"red_hat_enterprise_linux_6","product_identification_helper":{"cpe":"cpe:/o:redhat:enterprise_linux:6"}}}],"category":"product_family","name":"Red Hat Enterprise Linux 6"},{"branches":[{"category":"product_name","name":"Red Hat Enterprise Linux 7","product":{"name":"Red Hat Enterprise Linux 7","product_id":"red_hat_enterprise_linux_7","product_identification_helper":{"cpe":"cpe:/o:redhat:enterprise_linux:7"}}}],"category":"product_family","name":"Red Hat Enterprise Linux 7"},{"branches":[{"category":"product_name","name":"Red Hat Enterprise Linux 8","product":{"name":"Red Hat Enterprise Linux 8","product_id":"red_hat_enterprise_linux_8","product_identification_helper":{"cpe":"cpe:/o:redhat:enterprise_linux:8"}}}],"category":"product_family","name":"Red Hat Enterprise Linux 8"},{"branches":[{"category":"product_name","name":"Red Hat Enterprise Linux 9","product":{"name":"Red Hat Enterprise Linux 9","product_id":"red_hat_enterprise_linux_9","product_identification_helper":{"cpe":"cpe:/o:redhat:enterprise_linux:9"}}}],"category":"product_family","name":"Red Hat Enterprise Linux 9"},{"category":"product_version","name":"openslp.src","product":{"name":"openslp.src","product_id":"openslp.src","product_identification_helper":{"purl":"pkg:rpm/redhat/openslp?arch=src"}}},{"category":"product_version","name":"openslp-devel","product":{"name":"openslp-devel","product_id":"openslp-devel","product_identification_helper":{"purl":"pkg:rpm/redhat/openslp-devel"}}},{"category":"product_version","name":"openslp-server","product":{"name":"openslp-server","product_id":"openslp-server","product_identification_helper":{"purl":"pkg:rpm/redhat/openslp-server"}}},{"category":"product_version","name":"openslp","product":{"name":"openslp","product_id":"openslp","product_identification_helper":{"purl":"pkg:rpm/redhat/openslp"}}}],"category":"vendor","name":"Red Hat"}],"relationships":[{"category":"default_component_of","full_product_name":{"name":"openslp as a component of Red Hat Enterprise Linux 6","product_id":"red_hat_enterprise_linux_6:openslp"},"product_reference":"openslp","relates_to_product_reference":"red_hat_enterprise_linux_6"},{"category":"default_component_of","full_product_name":{"name":"openslp-devel as a component of Red Hat Enterprise Linux 6","product_id":"red_hat_enterprise_linux_6:openslp-devel"},"product_reference":"openslp-devel","relates_to_product_reference":"red_hat_enterprise_linux_6"},{"category":"default_component_of","full_product_name":{"name":"openslp-server as a component of Red Hat Enterprise Linux 6","product_id":"red_hat_enterprise_linux_6:openslp-server"},"product_reference":"openslp-server","relates_to_product_reference":"red_hat_enterprise_linux_6"},{"category":"default_component_of","full_product_name":{"name":"openslp.src as a component of Red Hat Enterprise Linux 6","product_id":"red_hat_enterprise_linux_6:openslp.src"},"product_reference":"openslp.src","relates_to_product_reference":"red_hat_enterprise_linux_6"},{"category":"default_component_of","full_product_name":{"name":"openslp as a component of Red Hat Enterprise Linux 7","product_id":"red_hat_enterprise_linux_7:openslp"},"product_reference":"openslp","relates_to_product_reference":"red_hat_enterprise_linux_7"},{"category":"default_component_of","full_product_name":{"name":"openslp-devel as a component of Red Hat Enterprise Linux 7","product_id":"red_hat_enterprise_linux_7:openslp-devel"},"product_reference":"openslp-devel","relates_to_product_reference":"red_hat_enterprise_linux_7"},{"category":"default_component_of","full_product_name":{"name":"openslp-server as a component of Red Hat Enterprise Linux 7","product_id":"red_hat_enterprise_linux_7:openslp-server"},"product_reference":"openslp-server","relates_to_product_reference":"red_hat_enterprise_linux_7"},{"category":"default_component_of","full_product_name":{"name":"openslp.src as a component of Red Hat Enterprise Linux 7","product_id":"red_hat_enterprise_linux_7:openslp.src"},"product_reference":"openslp.src","relates_to_product_reference":"red_hat_enterprise_linux_7"},{"category":"default_component_of","full_product_name":{"name":"openslp as a component of Red Hat Enterprise Linux 8","product_id":"red_hat_enterprise_linux_8:openslp"},"product_reference":"openslp","relates_to_product_reference":"red_hat_enterprise_linux_8"},{"category":"default_component_of","full_product_name":{"name":"openslp-devel as a component of Red Hat Enterprise Linux 8","product_id":"red_hat_enterprise_linux_8:openslp-devel"},"product_reference":"openslp-devel","relates_to_product_reference":"red_hat_enterprise_linux_8"},{"category":"default_component_of","full_product_name":{"name":"openslp as a component of Red Hat Enterprise Linux 9","product_id":"red_hat_enterprise_linux_9:openslp"},"product_reference":"openslp","relates_to_product_reference":"red_hat_enterprise_linux_9"},{"category":"default_component_of","full_product_name":{"name":"openslp-devel as a component of Red Hat Enterprise Linux 9","product_id":"red_hat_enterprise_linux_9:openslp-devel"},"product_reference":"openslp-devel","relates_to_product_reference":"red_hat_enterprise_linux_9"},{"category":"default_component_of","full_product_name":{"name":"openslp-server as a component of Red Hat Enterprise Linux 9","product_id":"red_hat_enterprise_linux_9:openslp-server"},"product_reference":"openslp-server","relates_to_product_reference":"red_hat_enterprise_linux_9"}]},"vulnerabilities":[{"cve":"CVE-2023-29552","cwe":{"id":"CWE-406","name":"Insufficient Control of Network Message Volume (Network Amplification)"},"discovery_date":"2023-03-31T00:00:00+00:00","flags":[{"label":"vulnerable_code_not_present","product_ids":["red_hat_enterprise_linux_8:openslp","red_hat_enterprise_linux_8:openslp-devel"]}],"ids":[{"system_name":"Red Hat Bugzilla ID","text":"2183534"}],"notes":[{"category":"description","text":".The Service Location Protocol (SLP) is vulnerable to an attack through UDP\r\n\r\nThe OpenSLP provides a dynamic configuration mechanism for applications in local area networks, such as printers and file servers. However, SLP is vulnerable to a reflective denial of service amplification attack through UDP on systems connected to the internet. SLP allows an unauthenticated attacker to register new services without limits set by the SLP implementation. By using UDP and spoofing the source address, an attacker can request the service list, creating a Denial of Service on the spoofed address.\r\n\r\nTo prevent external attackers from accessing the SLP service, disable SLP on all systems running on untrusted networks, such as those directly connected to the internet. Alternatively, to work around this problem, configure firewalls to block or filter traffic on UDP and TCP port 427.","title":"Vulnerability description"},{"category":"summary","text":"openslp: Reflective denial of service amplification attack via UDP","title":"Vulnerability summary"},{"category":"other","text":"The OpenSLP protocol specification makes it prone to UDP amplification attacks, and the abuse of exposed OpenSLP servers can be used to contribute to Distributed Denial of Service attacks. Due to the protocol implementation, this issue can't be directly fixed.\n\nThis issue affects the Server component of the openslp package, which is only shipped on Red Hat Enterprise Linux 7 and 9.\nRHEL 8 only ships the Client component, that is not affected by this CVE.\n\nThe OpenSLP server is not installed and active on any standard RHEL deployments. If you are using the OpenSLP server, Red Hat recommends to do so in a secure and controlled network environment.","title":"Statement"},{"category":"general","text":"The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.","title":"CVSS score applicability"}],"product_status":{"known_affected":["red_hat_enterprise_linux_6:openslp","red_hat_enterprise_linux_6:openslp-devel","red_hat_enterprise_linux_6:openslp-server","red_hat_enterprise_linux_6:openslp.src","red_hat_enterprise_linux_7:openslp","red_hat_enterprise_linux_7:openslp-devel","red_hat_enterprise_linux_7:openslp-server","red_hat_enterprise_linux_7:openslp.src","red_hat_enterprise_linux_9:openslp","red_hat_enterprise_linux_9:openslp-devel","red_hat_enterprise_linux_9:openslp-server"],"known_not_affected":["red_hat_enterprise_linux_8:openslp","red_hat_enterprise_linux_8:openslp-devel"]},"references":[{"category":"self","summary":"Canonical URL","url":"https://access.redhat.com/security/cve/CVE-2023-29552"},{"category":"external","summary":"RHBZ#2183534","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2183534"},{"category":"external","summary":"RHSB-index#known-issues-shells-and-command-line-tools","url":"https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/9/html-single/9.2_release_notes/index#known-issues-shells-and-command-line-tools"},{"category":"external","summary":"https://www.cve.org/CVERecord?id=CVE-2023-29552","url":"https://www.cve.org/CVERecord?id=CVE-2023-29552"},{"category":"external","summary":"https://nvd.nist.gov/vuln/detail/CVE-2023-29552","url":"https://nvd.nist.gov/vuln/detail/CVE-2023-29552"},{"category":"external","summary":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog","url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog"}],"release_date":"2023-04-25T00:00:00+00:00","remediations":[{"category":"no_fix_planned","details":"Out of support scope","product_ids":["red_hat_enterprise_linux_6:openslp","red_hat_enterprise_linux_6:openslp-devel","red_hat_enterprise_linux_6:openslp-server","red_hat_enterprise_linux_6:openslp.src"]},{"category":"no_fix_planned","details":"Will not fix","product_ids":["red_hat_enterprise_linux_7:openslp","red_hat_enterprise_linux_7:openslp-devel","red_hat_enterprise_linux_7:openslp-server","red_hat_enterprise_linux_7:openslp.src","red_hat_enterprise_linux_9:openslp","red_hat_enterprise_linux_9:openslp-devel","red_hat_enterprise_linux_9:openslp-server"]}],"scores":[{"cvss_v3":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":7.5,"baseSeverity":"HIGH","confidentialityImpact":"NONE","integrityImpact":"NONE","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","version":"3.1"},"products":["red_hat_enterprise_linux_6:openslp","red_hat_enterprise_linux_6:openslp-devel","red_hat_enterprise_linux_6:openslp-server","red_hat_enterprise_linux_6:openslp.src","red_hat_enterprise_linux_7:openslp","red_hat_enterprise_linux_7:openslp-devel","red_hat_enterprise_linux_7:openslp-server","red_hat_enterprise_linux_7:openslp.src","red_hat_enterprise_linux_8:openslp","red_hat_enterprise_linux_8:openslp-devel","red_hat_enterprise_linux_9:openslp","red_hat_enterprise_linux_9:openslp-devel","red_hat_enterprise_linux_9:openslp-server"]}],"threats":[{"category":"exploit_status","date":"2023-11-08T00:00:00+00:00","details":"CISA: https://www.cisa.gov/known-exploited-vulnerabilities-catalog"},{"category":"impact","details":"Important","product_ids":["red_hat_enterprise_linux_6:openslp","red_hat_enterprise_linux_6:openslp-devel","red_hat_enterprise_linux_6:openslp-server","red_hat_enterprise_linux_6:openslp.src","red_hat_enterprise_linux_7:openslp","red_hat_enterprise_linux_7:openslp-devel","red_hat_enterprise_linux_7:openslp-server","red_hat_enterprise_linux_7:openslp.src","red_hat_enterprise_linux_8:openslp","red_hat_enterprise_linux_8:openslp-devel","red_hat_enterprise_linux_9:openslp","red_hat_enterprise_linux_9:openslp-devel","red_hat_enterprise_linux_9:openslp-server"]}],"title":"openslp: Reflective denial of service amplification attack via UDP"}]}