CVE-2023-50570
IPAddress Infinite Loop vulnerability (Disputed)
An issue in the component IPAddressBitsDivision of IPAddress v5.1.0 leads to an infinite loop. This is disputed because an infinite loop occurs only for cases in which the developer supplies invalid arguments. The product is not intended to always halt for contrived inputs.
Attack profile
How easy it is to exploit
- Attack vector
- Local
- Complexity
- Low
- Privileges needed
- None
- User interaction
- Required
What an attacker can affect
- Confidentiality
- None
- Integrity
- None
- Availability
- High
Exploit likelihood
What each source reports
NVD Score used
An issue in the component IPAddressBitsDivision of IPAddress v5.1.0 leads to an infinite loop. This is disputed because an infinite loop occurs only for cases in which the developer supplies invalid arguments. The product is not intended to always halt for contrived inputs.
- Record
CVE-2023-50570- CVSS 3.1
- 5.5 Medium
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H - Weakness
- CWE-835
- Updated
- 2026-11-02
CVE List No score
An issue in the component IPAddressBitsDivision of IPAddress v5.1.0 leads to an infinite loop. This is disputed because an infinite loop occurs only for cases in which the developer supplies invalid arguments. The product is not intended to always halt for contrived inputs.
- Record
CVE-2023-50570- Updated
- 2026-11-02
EUVDEUVD-2023-3274 No score
An issue in the component IPAddressBitsDivision of IPAddress v5.1.0 leads to an infinite loop. This is disputed because an infinite loop occurs only for cases in which the developer supplies invalid arguments. The product is not intended to always halt for contrived inputs.
- Record
EUVD-2023-3274- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-qphf-w3cq-jpmx
IPAddress Infinite Loop vulnerability (Disputed)
An issue in the component IPAddressBitsDivision of IPAddress v5.1.0 leads to an infinite loop.
- Record
GHSA-qphf-w3cq-jpmx- CVSS 3.1
- 5.5 Medium
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H - Weakness
- CWE-835
- Updated
- 2026-11-02
OSVGHSA-qphf-w3cq-jpmx
IPAddress Infinite Loop vulnerability (Disputed)
An issue in the component IPAddressBitsDivision of IPAddress v5.1.0 leads to an infinite loop.
- Record
GHSA-qphf-w3cq-jpmx- CVSS 3.1
- 5.5 Medium
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H - Weakness
- CWE-835
- Updated
- 2026-11-02
OSV No score
An issue in the component IPAddressBitsDivision of IPAddress v5.1.0 leads to an infinite loop. This is disputed because an infinite loop occurs only for cases in which the developer supplies invalid arguments. The product is not intended to always halt for contrived inputs.
- Record
CVE-2023-50570- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:14468-1 No score
IPAddress-5.5.1-1.1 on GA media
These are all security issues fixed in the IPAddress-5.5.1-1.1 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:14468-1- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
IPAddressopenSUSE:Tumbleweed |
before 5.5.1-1.1 | 5.5.1-1.1 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2023-50570 is a medium vulnerability (CVSS 5.5) in Seancfoley Ipaddress, published December 29, 2023. Its validity is disputed. EPSS puts the chance of exploitation in the next 30 days at 0.28%, the 20th percentile. Fixed in IPAddress 5.5.1-1.1.
References
github.com/seancfoley/IPAddress/issues/118
nvd.nist.gov/vuln/detail/CVE-2023-50570
suse.com/security/cve/CVE-2023-50570