Detections
Analytics
Alpine: multiple fig2dev packages: security update to 3.2.9a-r2
medium Tenable Self-Hosted Container Security Plugin ID 444414
Description
There are packages installed that are affected by multiple vulnerabilities referenced in the following CVEs:- Floating point exception in fig2dev in version 3.2.9a allows an attacker to availability via local input
manipulation via get_slope function. (CVE-2025-31162)
- Segmentation fault in fig2dev in version 3.2.9a allows an attacker to availability via local input
manipulation via put_patternarc function. (CVE-2025-31163)
- heap-buffer overflow in fig2dev in version 3.2.9a allows an attacker to availability via local input
manipulation via create_line_with_spline. (CVE-2025-31164)
Solution
Update the fig2dev library and its related packages to version 3.2.9a-r2 or later.See Also
https://security.alpinelinux.org/vuln/CVE-2025-31162
Plugin Details
Severity: Medium
ID: 444414
Version: Revision 1.1
Type: Local
Published: 7/4/2026
Updated: 7/4/2026
Supported Sensors: Agentless Assessment
Risk Information
VPR
Risk Factor: Low
Score: 3.9
Percentile: 52.26
CVSS v2
Risk Factor: Medium
Base Score: 5.7
Temporal Score: 4.5
Vector: CVSS2#AV:L/AC:L/Au:S/C:P/I:P/A:C
CVSS Score Source: CVE-2025-31164
CVSS v3
Risk Factor: Medium
Base Score: 6.6
Temporal Score: 5.9
Vector: CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H
Temporal Vector: CVSS:3.0/E:P/RL:O/RC:C
Vulnerability Information
Exploit Available: true
Exploit Ease: Exploits are available
Vulnerability Publication Date: 3/28/2025