CVE-2020-14651: 
MySQL vulnerability analysis and mitigation

CVE-2020-14651 is a security vulnerability affecting MySQL Server's Security Roles component in versions 8.0.20 and prior. The vulnerability was disclosed in July 2020 as part of Oracle's Critical Patch Update (Oracle CPU).

This is an easily exploitable vulnerability that allows high-privileged attackers with network access via multiple protocols to compromise MySQL Server. The vulnerability has a CVSS 3.1 Base Score of 5.5 (Medium) with the following vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H (NVD).

Successful exploitation of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server as well as unauthorized update, insert or delete access to some of MySQL Server accessible data (NVD).

The vulnerability requires a high-privileged attacker with network access. It is considered easily exploitable due to its low attack complexity and no user interaction requirement (NVD).

The vulnerability was fixed in MySQL version 8.0.21. Users should upgrade to this version or later to mitigate the risk. Ubuntu users should update to mysql-server-8.0 version 8.0.21-0ubuntu0.20.04.3 for Ubuntu 20.04 (Ubuntu Notice).