PT-2020-4843 · Oracle+4 · Mysql Server+3
Published
2020-10-20
·
Updated
2022-04-12
·
CVE-2020-14771
CVSS v2.0
3.5
Low
| Vector | AV:N/AC:M/Au:S/C:N/I:N/A:P |
Name of the Vulnerable Software and Affected Versions:
MySQL Server versions 5.7.31 and prior
MySQL Server versions 8.0.21 and prior
Description:
The issue is related to insufficient input validation in the Server: Security: LDAP Auth component of MySQL Server. It allows a high-privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks can result in unauthorized ability to cause a partial denial of service (partial DOS) of MySQL Server.
Recommendations:
For MySQL Server versions 5.7.31 and prior, update to a version later than 5.7.31 to resolve the issue.
For MySQL Server versions 8.0.21 and prior, update to a version later than 8.0.21 to resolve the issue.
As a temporary workaround, consider restricting access to the
Server: Security: LDAP Auth component to minimize the risk of exploitation.Exploit
Fix
RCE
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Alt Linux
Linuxmint
Mysql Server
Ubuntu