CVE-2020-14878: 
MySQL vulnerability analysis and mitigation

CVE-2020-14878 is a vulnerability in MySQL Server that affects versions through 5.6.49, 5.7.31, and 8.0.21. The vulnerability allows low privileged attackers with access to the physical communication segment attached to the hardware where MySQL is running to potentially gain unauthorized access (Oracle CPE).

The vulnerability has a CVSS v3.1 base score of 8.0 (HIGH) with the following vector: AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H. This indicates that the vulnerability requires adjacent network access, low attack complexity, low privileges, no user interaction, and can result in high impacts to confidentiality, integrity and availability (NetApp Security).

Successful exploitation of this vulnerability could lead to unauthorized takeover of MySQL Server, unauthorized read or modification access to a subset or all of the MySQL Server accessible data, or cause a hang or frequently repeatable crash resulting in partial or complete denial of service of MySQL Server (NetApp Security).

The vulnerability requires adjacent network access and low privileges for exploitation. It has been publicly disclosed and discussed, though no specific details about active exploitation in the wild have been confirmed (NetApp Security).

Oracle has released security patches to address this vulnerability in MySQL version 8.0.22 and 5.7.32. Users are strongly recommended to update to these patched versions. For systems that cannot be immediately updated, limiting network access to trusted adjacent networks may help reduce risk (Ubuntu Security).