Incorrect Authorization

Overview Affected versions of this package are vulnerable to Incorrect Authorization in the snapshot restoration process. An attacker can gain unauthorized root access on the host by importing a specially crafted instance backup containing restricted configuration keys within a snapshot, which ar...

EUVD-2026-39794

A privilege escalation vulnerability exists in LXD from 6.0 before 6.9, 5.21.0 before 5.21.5, and 5.0.0 before 5.0.7 regarding the handling of project-restriction policies during snapshot restoration.. An authenticated project operator in a restricted multi-tenant environment can bypass policy...

CVE-2026-26738

Uderzo Software SpaceSniffer version 2.0.5.18 is vulnerable to a stack-based buffer overflow when processing a specially crafted .sns snapshot file . This flaw allows a remote attacker to potentially execute arbitrary code . At this time, there is no information regarding a newer version that con...

SUSE CVE-2015-0236

libvirt before 1.2.12 allow remote authenticated users to obtain the VNC password by using the VIRDOMAINXMLSECURE flag with a crafted 1 snapshot to the virDomainSnapshotGetXMLDesc interface or 2 image to the virDomainSaveImageGetXMLDesc interface...

DEBIAN-CVE-2015-0236

libvirt before 1.2.12 allow remote authenticated users to obtain the VNC password by using the VIRDOMAINXMLSECURE flag with a crafted 1 snapshot to the virDomainSnapshotGetXMLDesc interface or 2 image to the virDomainSaveImageGetXMLDesc interface...

kernel: dm: dm-snapshot data leak

Interpretation conflict in drivers/md/dm-snap-persistent.c in the Linux kernel through 3.11.6 allows remote authenticated users to obtain sensitive information or modify data via a crafted mapping to a snapshot block device...