Search code examples
web-servicessecurityws-securitysystem-administrationws-discovery

Security issue about WS-Discovery protocol

How comes all servers on LAN broadcsat WS-Discovery Resolve message that ends up with total congestion?

The LAN is flooded with resolve messages from different servers to IPv4 multicast address.

The following is the message body

urn:uuid:704c7c3d-b73f-410d-88bc-68d5c5dd9219

How is it all about?

Edit: It's how it works. However the point is, why they never stop? What if a resolve fails?

Solution

  • Because using the WS-Discovery protocol clients send Resolve message by using UDP multicast to find out transport addresses for services. The UDP multicast is what you're seeing unless I'm missing something.