Detections
Analytics
Alpine: multiple luajit packages: security update to 2.1_p20240815-r1
critical Tenable Cloud Security Plugin ID 435348
Description
There are packages installed that are affected by multiple vulnerabilities referenced in the following CVEs:- LuaJIT through 2.1 and OpenRusty luajit2 before v2.1-20240626 have a stack-buffer-overflow in
lj_strfmt_wfnum in lj_strfmt_num.c. (CVE-2024-25176)
- LuaJIT through 2.1 and OpenRusty luajit2 before v2.1-20240314 have an unsinking of IR_FSTORE for NULL
metatable, which leads to Denial of Service (DoS). (CVE-2024-25177)
- LuaJIT through 2.1 and OpenRusty luajit2 before v2.1-20240314 have an out-of-bounds read in the stack-
overflow handler in lj_state.c. (CVE-2024-25178)
See Also
https://security.alpinelinux.org/vuln/CVE-2024-25176
Plugin Details
Severity: Critical
ID: 435348
Version: Revision 1.3
Type: Local
Published: 9/18/2025
Updated: 6/1/2026
Supported Sensors: Agentless Assessment, Tenable Cloud Security, Tenable Self-Hosted Container Security
Risk Information
VPR
Risk Factor: Medium
Score: 4.9
Percentile: 57.15
CVSS v2
Risk Factor: Critical
Base Score: 10
Temporal Score: 7.8
Vector: CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C
CVSS Score Source: CVE-2024-25176
CVSS v3
Risk Factor: Critical
Base Score: 9.8
Temporal Score: 8.8
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Temporal Vector: CVSS:3.0/E:P/RL:O/RC:C
Vulnerability Information
Exploit Available: true
Exploit Ease: Exploits are available
Vulnerability Publication Date: 7/7/2025