CVE-2020-14663: 
MySQL vulnerability analysis and mitigation

CVE-2020-14663 is a vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Security: Privileges) affecting versions 8.0.20 and prior. The vulnerability was disclosed on July 15, 2020, and impacts the security privileges component of MySQL Server (NVD).

This is an easily exploitable vulnerability that allows high privileged attackers with network access via multiple protocols to compromise MySQL Server. The vulnerability has a CVSS 3.1 Base Score of 7.2 (HIGH) with the following vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H, indicating high impacts to confidentiality, integrity and availability (Oracle Advisory).

Successful exploitation of this vulnerability can result in complete takeover of MySQL Server. The vulnerability affects confidentiality, integrity, and availability with high severity ratings for all three aspects (NetApp Advisory).

The vulnerability is considered easily exploitable by attackers with high privileges who have network access through multiple protocols. The attack requires low attack complexity and no user interaction (NVD).

Oracle has released patches to address this vulnerability in MySQL version 8.0.21. Ubuntu systems can be updated to mysql-server-8.0 version 8.0.21-0ubuntu0.20.04.3 for Ubuntu 20.04, and mysql-server-5.7 version 5.7.31-0ubuntu0.18.04.1 for Ubuntu 18.04 (Ubuntu Notice).