CVE-2018-15470

An issue was discovered in Xen through 4.11.x. The logic in oxenstored for handling writes depended on the order of evaluation of expressions making up a tuple. As indicated in section 7.7.3 "Operations on data structures" of the OCaml manual, the order of evaluation of subexpressions is not specified. In practice, different implementations behave differently. Thus, oxenstored may not enforce the configured quota-maxentity. This allows a malicious or buggy guest to write as many xenstore entries as it wishes, causing unbounded memory usage in oxenstored. This can lead to a system-wide DoS.

• CWE-400

• http://xenbits.xen.org/xsa/advisory-272.htmlVendor Advisory
• https://lists.debian.org/debian-lts-announce/2018/11/msg00013.html
• https://security.gentoo.org/glsa/201810-06Third Party Advisory
• http://xenbits.xen.org/xsa/advisory-272.htmlVendor Advisory
• https://lists.debian.org/debian-lts-announce/2018/11/msg00013.html
• https://security.gentoo.org/glsa/201810-06Third Party Advisory

Published

Aug 17, 2018

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2018-15465A vulnerability in the authorization subsystem of Cisco Adap…8.1
• CVE-2018-15466A vulnerability in the Graphite web interface of the Policy …5.3
• CVE-2018-15467A vulnerability in the web-based management interface of Cis…6.1
• CVE-2018-15468An issue was discovered in Xen through 4.11.x. The DEBUGCTL …
• CVE-2018-15469An issue was discovered in Xen through 4.11.x. ARM never pro…
• CVE-2018-1547IBM Robotic Process Automation with Automation Anywhere 10.0…8
• CVE-2018-15471An issue was discovered in xenvif_set_hash_mapping in driver…7.8
• CVE-2018-15472An issue was discovered in GitLab Community and Enterprise E…7.5
• CVE-2018-15473OpenSSH through 7.7 is prone to a user enumeration vulnerabi…5.3
• CVE-2018-15474CSV Injection (aka Excel Macro Injection or Formula Injectio…
• CVE-2018-15476An issue was discovered in myStrom WiFi Switch V1 before 2.6…
• CVE-2018-15477myStrom WiFi Switch V1 devices before 2.66 did not sanitize …