IPAddress Infinite Loop vulnerability (Disputed)

MEDIO 5.5CVE-2023-50570 · GHSA-qphf-w3cq-jpmx · Published 29/12/2023 · updated 17/06/2026

In breve

CVE-2023-50570 è una vulnerabilità MEDIO (CVSS 5.5) che riguarda com.github.seancfoley:ipaddress, ipaddress (seancfoley).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 0.28%, superiore al 20.2% delle vulnerabilità.
Nessuna versione corretta ancora nota: segui l'avviso del produttore nei riferimenti.

Package	Affected versions	Patched versions
com.github.seancfoley:ipaddress Maven	`≤ 5.4.0`	No fix yet
ipaddress seancfoley	`= 5.1.0`	No fix yet

Description

An issue in the component IPAddressBitsDivision of IPAddress v5.1.0 leads to an infinite loop.

NVD description

An issue in the component IPAddressBitsDivision of IPAddress v5.1.0 leads to an infinite loop. This is disputed because an infinite loop occurs only for cases in which the developer supplies invalid arguments. The product is not intended to always halt for contrived inputs.

References

nvd.nist.gov/vuln/detail/CVE-2023-50570 · ADVISORY
seancfoley/IPAddress · WEB
seancfoley/IPAddress · WEB
github/advisory-database#3279 · WEB
seancfoley/IPAddress · PACKAGE

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free