Read the docs
TI-2025-23146 Aliases CVE-2025-32022

Finit has heap based buffer overwrite in urandom.so plugin

Priority LOW 20CWE-787Published · Updated

Key facts

Attack vector
Local
Privileges required
High
User interaction
Required
Attack complexity
High
Impact type
—
Confidentiality · integrity · availability
None · High · Low
Fix status
Fixed

Attack profile from CVSS 3.1 · CNA. Fix status from CNA.

Summary

Finit provides fast init for Linux systems. Finit's urandom plugin has a heap buffer overwrite vulnerability at boot which leads to it overwriting other parts of the heap, possibly causing random instabilities and undefined behavior. The urandom plugin is enabled by default, so this bug affects everyone using Finit 4.2 or later that do not explicitly disable the plugin at build time. This bug is fixed in Finit 4.12. Those who cannot upgrade or backport the fix to urandom.c are strongly recommended to disable the plugin in the call to the `configure` script.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00146 3rd percentileScored 2026-11-07
Fix Fixed finit (troglobit): 4.12

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
No
Technical impact
Partial

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
troglobitfinit4.2 to before 4.124.12Patch availableCNA
  • finit Vendortroglobit Affected 4.2 to before 4.12 Fixed in 4.12 Patch available CNA

Remediation

  • Fix · CNA finit (troglobit) Fixed in 4.12

Timeline

  1. 2026-10-02 Threatist record created from CVE-2025-32022

References

Other 2

  • TI-2020-19317 Redir 3.3 - Denial of Service CVSS 4.0HIGH 8.7
  • TI-2025-21291 Finit bundled getty can bypass /bin/login CVSS 3.1HIGH 8.6
  • TI-2020-13817 There are multiple unauthenticated directory traversal vulnerabilities in different FTP… CVSS 3.1CRITICAL 9.8
  • TI-2022-24152 uev (aka libuev) before 2.4.1 has a buffer overflow in epoll_wait if maxevents is a large number. CVSS 3.1CRITICAL 9.8
  • TI-2020-13816 An unauthenticated stack-based buffer overflow vulnerability in common.c's handle_PORT in… CVSS 3.1CRITICAL 9.8
  • TI-2020-04260 Buffer overflow vulnerability in uftpd CVSS 3.1HIGH 8.8
See all 9 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences