CVE-2020-14799: Medium severity mysql vulnerability

Published Oct 21, 2020

Updated

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Security: Encryption). Supported versions that are affected are 8.0.20 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).

Affected Software

6 affected components

Oracle MySQL>=8.0.0<=8.0.20

NetApp Active Iq Unified Manager Windows>=7.3

NetApp Active Iq Unified Manager Vmware Vsphere>=9.5

NetApp OnCommand Insight

NetApp OnCommand Workflow Automation

NetApp SnapCenter Server

Remediation

Patch Available

https://www.oracle.com/security-alerts/cpuoct2020.html

Event History

Oct 21, 2020

CVE Published

via MITRE·02:04 PM

Data Sourced

via MITRE·02:04 PM

DescriptionSeverityWeakness

Frequently Asked Questions

What is the severity of CVE-2020-14799?

CVE-2020-14799 is classified as a high severity vulnerability due to its potential to allow a high privileged attacker to compromise MySQL Server.

How do I fix CVE-2020-14799?

To fix CVE-2020-14799, upgrade MySQL Server to version 8.0.21 or later.

Which versions of MySQL are affected by CVE-2020-14799?

Versions 8.0.20 and prior of MySQL Server are affected by CVE-2020-14799.

What types of attacks can CVE-2020-14799 facilitate?

CVE-2020-14799 can facilitate attacks by allowing unauthorized access to the MySQL Server over multiple network protocols.

Is CVE-2020-14799 exploitable remotely?

Yes, CVE-2020-14799 is an easily exploitable vulnerability that can be accessed remotely by attackers with high privileges.