CVE-2020-14791: 
MySQL vulnerability analysis and mitigation

CVE-2020-14791 is a vulnerability discovered in Oracle MySQL Server's InnoDB component, affecting versions 8.0.21 and prior. The vulnerability was disclosed in October 2020 as part of Oracle's Critical Patch Update. It is characterized as a difficult-to-exploit vulnerability that requires a high-privileged attacker with network access via multiple protocols to compromise MySQL Server (Oracle CPU).

The vulnerability has been assigned a CVSS 3.1 Base Score of 2.2 (Low severity) with the following vector: CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:L. The scoring indicates that the vulnerability requires network access (AV:N), has high attack complexity (AC:H), requires high privileges (PR:H), needs no user interaction (UI:N), has unchanged scope (S:U), and only impacts availability (A:L) with no impact on confidentiality or integrity (NVD).

Successful exploitation of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of MySQL Server. The impact is limited to availability with no compromise to data confidentiality or integrity (Oracle CPU, NetApp Advisory).

The vulnerability is characterized as difficult to exploit and requires an attacker to have high privileges and network access via multiple protocols. The high attack complexity and privilege requirements make successful exploitation challenging (Oracle CPU).

Oracle has released patches for this vulnerability in MySQL version 8.0.22. Users are strongly recommended to update to this version or later to address the security issue. The fix was also included in subsequent security updates for various distributions including Fedora 31, 32, and 33 (Fedora Update).