CVE-2020-14619: 
MySQL vulnerability analysis and mitigation

CVE-2020-14619 is a vulnerability discovered in the MySQL Server product of Oracle MySQL, specifically affecting the Server Parser component. The vulnerability affects MySQL versions 8.0.20 and prior. This security issue was disclosed on July 15, 2020 (NVD, Oracle).

The vulnerability is classified as a parser-related security flaw in MySQL Server. It has been assigned a CVSS 3.1 Base Score of 6.5 (Medium severity) with the following vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H. The scoring indicates that the vulnerability is network-accessible, requires low attack complexity, needs low privileges, and no user interaction (NVD).

Successful exploitation of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash, leading to a complete Denial of Service (DoS) of MySQL Server. The vulnerability impacts only the availability of the system, with no direct effects on confidentiality or integrity (NVD).

The vulnerability is described as easily exploitable by a low-privileged attacker with network access via multiple protocols to compromise MySQL Server (NVD).

Oracle has released patches to address this vulnerability in MySQL version 8.0.21. Users are strongly advised to upgrade to this version or apply appropriate security patches. Ubuntu has also released fixes in version 8.0.21-0ubuntu0.20.04.3 for Ubuntu 20.04 LTS (Ubuntu).