CVE-2020-14812: 
MySQL vulnerability analysis and mitigation

A vulnerability was discovered in the MySQL Server product of Oracle MySQL (component: Server: Locking). The affected versions include MySQL Server 5.6.49 and prior, 5.7.31 and prior, and 8.0.21 and prior. This vulnerability was disclosed in October 2020 as part of Oracle's Critical Patch Update (Oracle CPU).

The vulnerability is easily exploitable and allows high-privileged attackers with network access via multiple protocols to compromise MySQL Server. The vulnerability has been assigned a CVSS 3.1 Base Score of 4.9 (Medium) with the following vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H (NVD).

Successful exploitation of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash, leading to a complete Denial of Service (DoS) of MySQL Server (NVD).

The vulnerability is considered easily exploitable but requires a high-privileged attacker with network access. The attack can be conducted through multiple protocols (Oracle CPU).

Oracle has released patches to address this vulnerability in their October 2020 Critical Patch Update. Users are strongly recommended to upgrade to the latest versions of affected MySQL Server installations. Various Linux distributions have also released security updates, including Debian, Fedora, and Gentoo (Debian Advisory, Gentoo Advisory).