CVE-2020-2806: Medium severity mysql vulnerability

Published Apr 15, 2020

Updated

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Compiling). Supported versions that are affected are 5.7.28 and prior. Difficult to exploit vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H).

Affected Software

6 affected components

Oracle MySQL>=5.7.0<5.7.29

NetApp Active Iq Unified Manager Windows>=7.3

NetApp Active Iq Unified Manager Vmware Vsphere>=9.5

NetApp OnCommand Insight

NetApp OnCommand Workflow Automation

NetApp Snapcenter

Event History

Apr 15, 2020

CVE Published

via MITRE·01:29 PM

Data Sourced

via MITRE·01:29 PM

DescriptionSeverityWeakness

Frequently Asked Questions

What is the severity of CVE-2020-2806?

CVE-2020-2806 is rated as a difficult to exploit vulnerability which allows low privileged attackers to compromise MySQL Server.

How do I fix CVE-2020-2806?

To mitigate CVE-2020-2806, upgrade MySQL Server to version 5.7.29 or later.

Which versions of MySQL are affected by CVE-2020-2806?

CVE-2020-2806 affects MySQL Server versions 5.7.28 and prior.

Can CVE-2020-2806 be exploited remotely?

Yes, CVE-2020-2806 can be exploited by attackers with network access via multiple protocols.

What components are affected by CVE-2020-2806?

CVE-2020-2806 specifically affects the Server: Compiling component of MySQL Server.