https://pwn.watch/t/ietf Live security incidents worldwide: CVEs, patch status, fixed versions, advisories and the posts that broke them. en Wed, 08 Nov 2023 00:00:00 GMT https://pwn.watch/i/ietf-service-location-protocol-slp-cve-2023-29552 https://pwn.watch/i/ietf-service-location-protocol-slp-cve-2023-29552 Wed, 08 Nov 2023 00:00:00 GMT high <p>The Service Location Protocol (SLP) contains a denial-of-service (DoS) vulnerability that could allow an unauthenticated, remote attacker to register services and use spoofed UDP traffic to conduct a denial-of-service (DoS) attack with a significant amplification factor. Added to CISA KEV on 2023-11-08.</p> <p><strong>Status:</strong> closed · <strong>Patch:</strong> patched · <strong>Fixed in:</strong> See vendor advisory linked in sources</p> <p><strong>Latest updates:</strong></p><ul><li>2023-11-08: CISA added CVE-2023-29552 to the KEV catalog (due 2023-11-29).</li></ul> <p><strong>CVEs:</strong> CVE-2023-29552</p>