PT-2020-3871 · Mysql Server+7 · Mysql Server+7
Published
2020-07-14
·
Updated
2022-07-01
·
CVE-2020-14539
CVSS v2.0
6.8
Medium
| Vector | AV:N/AC:L/Au:S/C:N/I:N/A:C |
Name of the Vulnerable Software and Affected Versions:
MySQL Server versions 5.6.48 and prior
MySQL Server versions 5.7.30 and prior
MySQL Server versions 8.0.20 and prior
Description:
The issue is related to insufficient input validation in the Server: Optimizer component of MySQL Server. It allows an attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server.
Recommendations:
For MySQL Server versions 5.6.48 and prior, update to a version later than 5.6.48 to resolve the issue.
For MySQL Server versions 5.7.30 and prior, update to a version later than 5.7.30 to resolve the issue.
For MySQL Server versions 8.0.20 and prior, update to a version later than 8.0.20 to resolve the issue.
As a temporary workaround, consider restricting network access to the MySQL Server until a patch is available.
Exploit
Fix
RCE
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Alt Linux
Almalinux
Centos
Linuxmint
Mysql Server
Red Hat
Rocky Linux
Ubuntu