CVE-2020-14830: 
MySQL vulnerability analysis and mitigation

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer) affecting supported versions 8.0.21 and prior. This vulnerability was disclosed in October 2020 as part of Oracle's Critical Patch Update (Oracle CPU). The vulnerability allows low privileged attackers with network access via multiple protocols to compromise MySQL Server (NVD).

The vulnerability has been assigned a CVSS v3.1 Base Score of 6.5 (Medium) with the vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H. The attack requires network access and low privileges, with no user interaction needed. The vulnerability specifically affects the Optimizer component of MySQL Server (Oracle CPU, NetApp Advisory).

Successful exploitation of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. The vulnerability affects availability but does not impact confidentiality or integrity of the system (NVD, NetApp Advisory).

The vulnerability is considered easily exploitable by low privileged attackers with network access via multiple protocols. The attack complexity is rated as low, requiring minimal access conditions to be exploited (NVD).

Oracle has released security patches as part of the October 2020 Critical Patch Update. Users are strongly recommended to upgrade to patched versions. For MySQL Server, this includes updating to versions newer than 5.6.49, 5.7.31, and 8.0.21 (Oracle CPU, Ubuntu Security).