漏洞信息
尽管我们使用了先进的大模型技术，但其输出仍可能包含不准确或过时的信息。神龙努力确保数据的准确性，但请您根据实际情况进行核实和判断。
Vulnerability Title
Finit has heap based buffer overwrite in urandom.so plugin
Vulnerability Description
Finit provides fast init for Linux systems. Finit's urandom plugin has a heap buffer overwrite vulnerability at boot which leads to it overwriting other parts of the heap, possibly causing random instabilities and undefined behavior. The urandom plugin is enabled by default, so this bug affects everyone using Finit 4.2 or later that do not explicitly disable the plugin at build time. This bug is fixed in Finit 4.12. Those who cannot upgrade or backport the fix to urandom.c are strongly recommended to disable the plugin in the call to the `configure` script.
CVSS Information
CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:U/C:N/I:H/A:L
Vulnerability Type
跨界内存写
Vulnerability Title
finit 缓冲区错误漏洞
Vulnerability Description
finit是Joachim Wiberg个人开发者的一个Linux的快速初始化工具。 finit 4.2及之后版本存在缓冲区错误漏洞，该漏洞源于urandom插件存在堆缓冲区覆盖，可能导致随机不稳定和未定义行为。
CVSS Information
N/A
Vulnerability Type
N/A