CVE-2020-14760: 
MySQL vulnerability analysis and mitigation

Oracle MySQL Server versions 5.7.31 and prior contain a vulnerability identified as CVE-2020-14760. This vulnerability was disclosed in October 2020 as part of Oracle's Critical Patch Update. The vulnerability affects the Server: Optimizer component of MySQL Server and impacts systems accessible via multiple protocols (Oracle CPU).

CVE-2020-14760 is an easily exploitable vulnerability that requires high privileged attacker access with network connectivity via multiple protocols to compromise MySQL Server. The vulnerability has been assigned a CVSS v3.1 Base Score of 5.5 (Medium) with the following vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H (NVD, NetApp Advisory).

Successful exploitation of this vulnerability can result in two primary impacts: unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server, and unauthorized update, insert or delete access to some of MySQL Server accessible data (NVD).

The vulnerability is considered easily exploitable but requires a high-privileged attacker with network access. The attack can be conducted via multiple protocols, though specific exploit details have not been publicly disclosed (Oracle CPU).

Oracle has released patches to address this vulnerability in their October 2020 Critical Patch Update. Users should upgrade to versions newer than MySQL 5.7.31. For systems that cannot be immediately upgraded, no alternative workarounds have been publicly documented (Oracle CPU, Ubuntu Security).