CVE-2015-0432: Medium severity oracle solaris and zettabyte file system (zfs) vulnerability
Published Jan 21, 2015
·Updated
Unspecified vulnerability in Oracle MySQL Server 5.5.40 and earlier allows remote authenticated users to affect availability via vectors related to Server : InnoDB : DDL : Foreign Key.
Affected Software
20 affected components
Oracle Solaris=11.3
Canonical Ubuntu Linux=12.04
Canonical Ubuntu Linux=14.04
Canonical Ubuntu Linux=14.10
Debian Debian Linux=7.0
Oracle MySQL>=5.5.0<=5.5.40
redhat Enterprise Linux Desktop=5.0
redhat Enterprise Linux Desktop=7.0
redhat Enterprise Linux Hpc Node=7.0
redhat Enterprise Linux Server=5.0
redhat Enterprise Linux Server=7.0
redhat Enterprise Linux Workstation=5.0
redhat Enterprise Linux Workstation=7.0
Fedoraproject Fedora=20
SUSE Linux Enterprise Desktop=12
SUSE Linux Enterprise Server=12
SUSE Linux Enterprise Software Development Kit=12
SUSE Linux Enterprise Workstation Extension=12
MariaDB MariaDB>=5.5.0<5.5.41
MariaDB MariaDB>=10.0.0<10.0.16
Remediation
Event History
Jan 21, 2015
CVE Published
via MITRE·07:00 PM
Data Sourced
via MITRE·07:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2015-0432?
CVE-2015-0432 is classified as a moderate severity vulnerability affecting Oracle MySQL Server.
2
How do I fix CVE-2015-0432?
To mitigate CVE-2015-0432, upgrade to a fixed version of Oracle MySQL Server that is higher than 5.5.40.
3
Who is affected by CVE-2015-0432?
Remote authenticated users of Oracle MySQL Server 5.5.40 and earlier are affected by CVE-2015-0432.
4
What is the impact of CVE-2015-0432?
CVE-2015-0432 can affect the availability of Oracle MySQL Server due to issues related to foreign key handling in InnoDB.
5
Which versions of MySQL are vulnerable to CVE-2015-0432?
Oracle MySQL Server versions 5.5.40 and earlier are vulnerable to CVE-2015-0432.