Service Location Protocol拒绝服务漏洞

详细信息

漏洞类型

其他

漏洞描述

Service Location Protocol（SLP）是一种用于发现、配置和管理网络服务的协议。Service Location Protocol存在安全漏洞，该漏洞源于允许未经身份验证的远程攻击者注册任意服务，这可能允许攻击者使用欺骗性UDP流量进行具有显着放大系数的拒绝服务攻击。目前已知VMWare ESXi管理程序、NetAPP、SUSE、柯达打印机、Planex路由器、IBM集成管理模块（IMM）、SMC IPMI等其它665种产品受到此漏洞影响。

修复建议

1、关注各厂商发布的升级补丁以修复漏洞：：VMWare： SUSE： NetAPP： 2、运行在不受信任网络上的所有系统上禁用SLP服务或端口427/UDP，包括直接连接到Internet的系统。 https://blogs.vmware.com/security/2023/04/vmware-response-to-cve-2023-29552-reflective-denial-of-service-dos-amplification-vulnerability-in-slp.html https://www.suse.com/support/kb/doc/?id=000021051 https://security.netapp.com/advisory/ntap-20230426-0001

参考链接

• https://security.netapp.com/advisory/ntap-20230426-0001/

  CVE · Third Party Advisory

• https://www.cisa.gov/news-events/alerts/2023/04/25/abuse-service-location-protocol-may-lead-dos-attacks

  CVE · US Government Resource · Third Party Advisory

• https://github.com/curesec/slpload

  CVE · Product

• https://www.suse.com/support/kb/doc/?id=000021051

  CVE · Third Party Advisory

• https://blogs.vmware.com/security/2023/04/vmware-response-to-cve-2023-29552-reflective-denial-of-service-dos-amplification-vulnerability-in-slp.html

  CVE · Third Party Advisory

• https://www.bitsight.com/blog/new-high-severity-vulnerability-cve-2023-29552-discovered-service-location-protocol-slp

  CVE · Exploit · Third Party Advisory

• https://datatracker.ietf.org/doc/html/rfc2608

  CVE · Technical Description

• https://curesec.com/blog/article/CVE-2023-29552-Service-Location-Protocol-Denial-of-Service-Amplification-Attack-212.html

  CVE · Exploit · Third Party Advisory

• https://cxsecurity.com/cveshow/CVE-2023-29552/
• https://access.redhat.com/security/cve/cve-2023-29552
• https://nvd.nist.gov/vuln/detail/CVE-2023-29552
• https://bugzilla.redhat.com/show_bug.cgi?id=2183534

  Snyk

• https://www.cisa.gov/known-exploited-vulnerabilities-catalog

  Snyk

• https://ubuntu.com/security/CVE-2023-29552

  OSV

• https://kb.cert.org/vuls/id/496472

  OSV

• https://www.cve.org/CVERecord?id=CVE-2023-29552

  OSV

• https://osv.dev/vulnerability/UBUNTU-CVE-2023-29552

  OSV

• https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2023-29552

  NVD · US Government Resource