Tritondatacenter's vulnerability footprint is centered on SmartOS, a specialized hypervisor and operating system for cloud infrastructure, with exposure concentrated in memory-safety and access-control weakness classes including path traversal, buffer overflows, out-of-bounds writes, and error-handling gaps. Current severity, exploitation, and exposure counts are shown alongside this summary.
The number and severity of CVEs published that impact products developed by Tritondatacenter over time
Signals from CVEs in this vendor scope (5 CVEs).
5 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2024-12084CRITICAL A heap-based buffer overflow flaw was found in the rsync daemon. This issue is due to improper handling of attacker-controlled checksum lengths (s2length) in the code. When MAX_DIG | Jan 15, 2025 | 9.8 | 75 | NO | NO |
CVE-2024-12085HIGH A flaw was found in rsync which could be triggered when rsync compares file checksums. This flaw allows an attacker to manipulate the checksum length (s2length) to cause a comparis | Jan 14, 2025 | 7.5 | 32 | NO | NO |
CVE-2024-12088HIGH A flaw was found in rsync. When using the `--safe-links` option, the rsync client fails to properly verify if a symbolic link destination sent from the server contains another symb | Jan 14, 2025 | 7.5 | 28 | NO | NO |
CVE-2024-12087HIGH A path traversal vulnerability exists in rsync. It stems from behavior enabled by the `--inc-recursive` option, a default-enabled option for many client options and can be enabled | Jan 14, 2025 | 7.5 | 27 | NO | NO |
CVE-2024-12086MEDIUM A flaw was found in rsync. It could allow a server to enumerate the contents of an arbitrary file from the client's machine. This issue occurs when files are being copied from a cl | Jan 14, 2025 | 6.8 | 25 | NO | NO |
Signals from CVEs in this vendor scope (5 CVEs).
An overview of all social media posts that mention a CVE ID that affects a product developed by Tritondatacenter.
Media articles that mention a CVE ID that affects a product developed by Tritondatacenter — matched by CVE ID, not by vendor name.