CVE-2023-50570

Published Dec 29, 2023

Last updated 3 months ago

CVSS medium 5.5

Overview

Description: An issue in the component IPAddressBitsDivision of IPAddress v5.1.0 leads to an infinite loop. This is disputed because an infinite loop occurs only for cases in which the developer supplies invalid arguments. The product is not intended to always halt for contrived inputs.
Source: cve@mitre.org
NVD status: Modified
CNA Tags: disputed

Risk scores

CVSS 3.1

Type: Primary
Base score: 5.5
Impact score: 3.6
Exploitability score: 1.8
Vector string: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Severity: MEDIUM

Weaknesses

nvd@nist.gov: CWE-835

Hype score: Not currently trending

Configurations

[
  {
    "nodes": [
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:a:seancfoley:ipaddress:5.1.0:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "0087B5A8-11C3-4AE2-9D43-FEE2C5CBE156"
          }
        ],
        "operator": "OR"
      }
    ]
  }
]

References