PT-2020-3444 · Oracle+8 · Mysql Server+7

Published

2020-07-14

·

Updated

2023-05-18

·

CVE-2020-14619

CVSS v2.0

6.8

Medium

VectorAV:N/AC:L/Au:S/C:N/I:N/A:C
Name of the Vulnerable Software and Affected Versions Oracle MySQL Server versions 8.0.20 and prior
Description The issue is related to insufficient access control in the Server: Parser component of Oracle MySQL Server. It can be exploited by a remote attacker to cause a denial of service using the MySQL protocol. Successful attacks can result in the ability to cause a hang or frequently repeatable crash of MySQL Server.
Recommendations For versions 8.0.20 and prior, update to a version that includes the fix for this issue to prevent exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com

Weakness Enumeration

CWE-264

Related Identifiers

ALSA-2020:3732
ALT-PU-2020-2640
ALT-PU-2021-2380
ALT-PU-2021-3668
BDU:2020-03768
CESA-2020_3732
CVE-2020-14619
RHSA-2020:3518
RHSA-2020:3732
RHSA-2020:3755
RHSA-2020:3757
RHSA-2020_3732
RLSA-2020:3732
USN-4441-1
USN-4441-2

Affected Products

Alt Linux
Almalinux
Centos
Linuxmint
Mysql Server
Red Hat
Rocky Linux
Ubuntu