{"id":"CVE-2023-50570","aliases":["EUVD-2023-3274","GHSA-qphf-w3cq-jpmx","openSUSE-SU-2024:14468-1"],"status":"disputed","title":"IPAddress Infinite Loop vulnerability (Disputed)","description":"An issue in the component IPAddressBitsDivision of IPAddress v5.1.0 leads to an infinite loop. This is disputed because an infinite loop occurs only for cases in which the developer supplies invalid arguments. The product is not intended to always halt for contrived inputs.","severity":{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-11","score":0.00277,"percentile":0.20321,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-835"],"published":"2023-12-29T00:00:00Z","modified":"2026-10-28T02:30:36Z","fixes":[{"ecosystem":"openSUSE:Tumbleweed","package":"IPAddress","fixed_in":["5.5.1-1.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"IPAddress","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.5.1-1.1"}]}]}],"products":[{"vendor":"seancfoley","product":"ipaddress"}],"references":[{"url":"https://github.com/seancfoley/IPAddress/issues/118","tags":["x_transferred","Exploit","Issue Tracking","Vendor Advisory","report","web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-50570","tags":["advisory"]},{"url":"https://github.com/seancfoley/IPAddress/issues/118#issuecomment-1876043773","tags":["web"]},{"url":"https://github.com/github/advisory-database/pull/3279","tags":["web"]},{"url":"https://github.com/advisories/GHSA-qphf-w3cq-jpmx"},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/50xxx/CVE-2023-50570.json","tags":["advisory"]},{"url":"https://github.com/seancfoley/IPAddress","tags":["package"]},{"url":"","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2023-50570","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2023-50570","description":"An issue in the component IPAddressBitsDivision of IPAddress v5.1.0 leads to an infinite loop. This is disputed because an infinite loop occurs only for cases in which the developer supplies invalid arguments. The product is not intended to always halt for contrived inputs.","status":"disputed","published":"2023-12-29T00:00:00Z","modified":"2024-09-03T19:55:34.63Z","updated_at":"2026-11-02T14:35:34.55015Z"}],"euvd":[{"id":"EUVD-2023-3274","description":"An issue in the component IPAddressBitsDivision of IPAddress v5.1.0 leads to an infinite loop. This is disputed because an infinite loop occurs only for cases in which the developer supplies invalid arguments. The product is not intended to always halt for contrived inputs.","status":"published","published":"2023-12-29T00:00:00Z","modified":"2024-09-03T19:55:34Z","updated_at":"2026-11-03T00:56:05.029422Z"}],"ghsa":[{"id":"GHSA-qphf-w3cq-jpmx","title":"IPAddress Infinite Loop vulnerability (Disputed)","description":"An issue in the component IPAddressBitsDivision of IPAddress v5.1.0 leads to an infinite loop.","status":"withdrawn","published":"2023-12-29T15:30:37Z","modified":"2024-01-12T17:48:26Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"cwes":["CWE-835"],"updated_at":"2026-11-02T14:37:30.812736Z"}],"nvd":[{"id":"CVE-2023-50570","description":"An issue in the component IPAddressBitsDivision of IPAddress v5.1.0 leads to an infinite loop. This is disputed because an infinite loop occurs only for cases in which the developer supplies invalid arguments. The product is not intended to always halt for contrived inputs.","status":"disputed","published":"2023-12-29T15:15:09.927Z","modified":"2026-06-17T06:39:45.07Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium","assessor":"primary"}],"cwes":["CWE-835"],"updated_at":"2026-11-02T14:08:59.830468Z"}],"osv":[{"id":"GHSA-qphf-w3cq-jpmx","title":"IPAddress Infinite Loop vulnerability (Disputed)","description":"An issue in the component IPAddressBitsDivision of IPAddress v5.1.0 leads to an infinite loop.","status":"withdrawn","published":"2023-12-29T15:30:37Z","modified":"2026-09-10T03:50:04.658578088Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"cwes":["CWE-835"],"updated_at":"2026-11-02T15:46:54.760124Z"},{"id":"CVE-2023-50570","description":"An issue in the component IPAddressBitsDivision of IPAddress v5.1.0 leads to an infinite loop. This is disputed because an infinite loop occurs only for cases in which the developer supplies invalid arguments. The product is not intended to always halt for contrived inputs.","status":"published","published":"2023-12-29T00:00:00Z","modified":"2026-10-28T02:30:36.307246509Z","updated_at":"2026-11-02T15:44:35.245372Z"},{"id":"openSUSE-SU-2024:14468-1","title":"IPAddress-5.5.1-1.1 on GA media","description":"These are all security issues fixed in the IPAddress-5.5.1-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-11-07T00:00:00Z","modified":"2026-02-04T03:08:37.799488Z","updated_at":"2026-11-02T16:58:36.976155Z"}]}}