CVE-2020-14775: 
MySQL vulnerability analysis and mitigation

CVE-2020-14775 is a vulnerability in the MySQL Server product of Oracle MySQL, specifically affecting the InnoDB component. The affected versions are MySQL 5.7.31 and prior, and 8.0.21 and prior. This vulnerability was disclosed as part of Oracle's October 2020 Critical Patch Update (Oracle CPU).

The vulnerability is characterized as easily exploitable, allowing low privileged attackers with network access via multiple protocols to compromise MySQL Server. It has been assigned a CVSS 3.1 Base Score of 6.5 (Medium) with the vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H (NVD).

Successful exploitation of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash, leading to a complete Denial of Service (DoS) of MySQL Server (Oracle CPU, NetApp Advisory).

The vulnerability is considered easily exploitable and requires a low-privileged attacker with network access via multiple protocols. The attack requires low attack complexity and no user interaction, though it does require low privileges to execute (NetApp Advisory).

Oracle has released patches to address this vulnerability in MySQL versions. Users should upgrade to MySQL version 5.7.32 or 8.0.22 or later. For Fedora users, updates are available through community-mysql-8.0.22 packages (Fedora Update).