PT-2020-3573

CVE-2020-14575

·

Published

2020-07-14

·

Updated

2023-05-17

Description by

CVSS 2.0
6.8
Medium
MetricsAV:N/AC:L/Au:S/C:N/I:N/A:C
Name of the Vulnerable Software and Affected Versions Oracle MySQL Server versions 8.0.20 and prior
Description The issue is related to insufficient input validation in the Server: DML component of Oracle MySQL Server. This can be exploited by a remote attacker to cause the server to hang or crash, resulting in a denial of service. The vulnerability can be exploited via multiple protocols, and successful attacks can lead to unauthorized ability to cause a hang or frequently repeatable crash of MySQL Server.
Recommendations For versions 8.0.20 and prior, update to a version that includes the fix for this issue to prevent exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploitability
Exploit
Impacts
Vendors
Affected products
Related identifiers
ALSA-2020:3732
ALT-PU-2020-2640
ALT-PU-2021-2380
ALT-PU-2021-3668
CESA-2020_3732
RHSA-2020:3518
RHSA-2020:3732
RHSA-2020_3732
RHSA-2020:3755
RHSA-2020:3757
RLSA-2020:3732
USN-4441-1
USN-4441-2
Found an issue in the description? Have something to add? Feel free to write us 👾