CVE-2015-0432

Name	CVE-2015-0432
Description	Unspecified vulnerability in Oracle MySQL Server 5.5.40 and earlier allows remote authenticated users to affect availability via vectors related to Server : InnoDB : DDL : Foreign Key.
Source	CVE (at NVD; CERT, LWN, oss-sec, fulldisc, bugtraq, EDB, Metasploit, Red Hat, Ubuntu, Gentoo, SUSE bugzilla/CVE, Mageia, GitHub code/issues, web search, more)
References	DSA-3135-1
NVD severity	medium (attack range: remote)
Debian Bugs	775881, 775882

Vulnerable and fixed packages

The table below lists information on source packages.

Source Package	Release	Version	Status
mariadb-10.0 (PTS)	jessie	10.0.32-0+deb8u1	fixed
	jessie (security)	10.0.35-0+deb8u1	fixed
mysql-5.5 (PTS)	jessie (security), jessie	5.5.60-0+deb8u1	fixed

The information below is based on the following data on fixed versions.

Package	Type	Release	Fixed Version	Urgency	Origin	Debian Bugs
mariadb-10.0	source	(unstable)	10.0.16-1	medium		775882
mysql-5.5	source	(unstable)	5.5.42-1	medium		775881
mysql-5.5	source	wheezy	5.5.41-0+wheezy1	medium	DSA-3135-1
percona-xtradb-cluster-5.5	source	(unstable)	(unfixed)	medium

http://www.oracle.com/technetwork/topics/security/cpujan2015-1972971.html#AppendixMSQL