CVE-2020-14870: 
MySQL vulnerability analysis and mitigation

CVE-2020-14870 is a vulnerability affecting MySQL Server's X Plugin component that was disclosed in October 2020. The vulnerability affects MySQL versions through 5.6.49, 5.7.31, and 8.0.21 and prior. This is an easily exploitable vulnerability that allows high-privileged attackers with network access via multiple protocols to compromise MySQL Server (Oracle CPE).

The vulnerability has been assigned a CVSS v3.1 base score of 4.9 (Medium) with the vector AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H, indicating that it requires network access and high privileges to exploit, but requires no user interaction and can result in high availability impact (NetApp Security).

Successful exploitation of this vulnerability could lead to unauthorized takeover of MySQL Server, unauthorized read or modification access to MySQL Server accessible data, or cause a hang or frequently repeatable crash resulting in partial or complete denial of service (DoS) of MySQL Server (NetApp Security).

The vulnerability is considered easily exploitable by attackers with high privileges and network access through multiple protocols. NetApp has acknowledged public discussion of this vulnerability (NetApp Security).

The vulnerability has been patched in MySQL version 8.0.22 for Ubuntu 20.04 LTS and Ubuntu 20.10, while Ubuntu 16.04 LTS and Ubuntu 18.04 LTS have been updated to MySQL 5.7.32. Users are strongly recommended to update their MySQL installations to these patched versions (Ubuntu Security).