PT-2023-31593 · Ipaddress · Ipaddress

Published 2023-12-29 · Updated 2024-11-07 · CVE-2023-50570

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions IPAddress version 5.1.0

Description An issue in the component IPAddressBitsDivision leads to an infinite loop. This issue is disputed as it only occurs when the developer supplies invalid arguments, and the product is not intended to always halt for contrived inputs.

Recommendations For IPAddress version 5.1.0, consider validating input arguments to the IPAddressBitsDivision component to prevent infinite loops. As a temporary workaround, consider implementing input validation checks to ensure that only valid arguments are supplied to the component.

Exploit

Fix

Infinite Loop

Weakness Enumeration

CWE-835

Related Identifiers

CVE-2023-50570

GHSA-QPHF-W3CQ-JPMX

OPENSUSE-SU-2024:14468-1

Affected Products

Ipaddress

References · 13

• 🔥 https://github.com/seancfoley/IPAddress/issues/118 · Exploit
• https://osv.dev/vulnerability/CVE-2023-50570 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2024:14468-1 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-qphf-w3cq-jpmx · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-50570 · Security Note
• https://github.com/github/advisory-database/pull/3279 · Note
• https://github.com/seancfoley/IPAddress/issues/118#issuecomment-1876043773 · Note
• https://github.com/seancfoley/IPAddress · Note
• https://t.me/cvenotify/88672 · Telegram Post
• https://twitter.com/VulmonFeeds/status/1740791852473733595 · Twitter Post
• https://suse.com/security/cve/CVE-2023-50570 · Note
• https://t.me/cibsecurity/73994 · Telegram Post
• https://twitter.com/CVEnew/status/1740747624443986258 · Twitter Post