IPAddress Infinite Loop vulnerability (Disputed)

MITTEL 5.5CVE-2023-50570 · GHSA-qphf-w3cq-jpmx · Published 29/12/2023 · updated 17/06/2026

Kurz gesagt

CVE-2023-50570 ist eine Schwachstelle (MITTEL (CVSS 5.5)) in com.github.seancfoley:ipaddress, ipaddress (seancfoley).
Wahrscheinlichkeit einer Ausnutzung in den nächsten 30 Tagen (EPSS): 0.28%, höher als bei 20.2% aller Schwachstellen.
Noch keine gepatchte Version bekannt: Herstellerhinweise unter Referenzen verfolgen.

Package	Affected versions	Patched versions
com.github.seancfoley:ipaddress Maven	`≤ 5.4.0`	No fix yet
ipaddress seancfoley	`= 5.1.0`	No fix yet

Description

An issue in the component IPAddressBitsDivision of IPAddress v5.1.0 leads to an infinite loop.

NVD description

An issue in the component IPAddressBitsDivision of IPAddress v5.1.0 leads to an infinite loop. This is disputed because an infinite loop occurs only for cases in which the developer supplies invalid arguments. The product is not intended to always halt for contrived inputs.

References

nvd.nist.gov/vuln/detail/CVE-2023-50570 · ADVISORY
seancfoley/IPAddress · WEB
seancfoley/IPAddress · WEB
github/advisory-database#3279 · WEB
seancfoley/IPAddress · PACKAGE

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free