CVE-2020-14893: 
MySQL vulnerability analysis and mitigation

CVE-2020-14893 is a security vulnerability affecting MySQL Server versions through 5.6.49, 5.7.31, and 8.0.21. The vulnerability was disclosed in October 2020 and affects multiple protocols in MySQL. This vulnerability allows high-privileged attackers with network access to potentially compromise the MySQL server (Oracle CPE, Ubuntu Notice).

The vulnerability has been assigned a CVSS v3.1 base score of 4.9 (MEDIUM), with the following vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H. This indicates that the vulnerability requires network access and high privileges to exploit, but does not require user interaction. The impact primarily affects system availability, with no direct impact on confidentiality or integrity (NetApp Advisory).

A successful exploitation of this vulnerability could lead to a denial of service condition, potentially causing the MySQL Server to hang or experience frequently repeatable crashes that could result in partial or complete service disruption (NetApp Advisory).

The vulnerability is considered easily exploitable by attackers who have high privileges and network access via multiple protocols. However, it requires high-level privileges to exploit, which somewhat limits the potential attack surface (Oracle CPE).

Oracle has released patches to address this vulnerability in the October 2020 Critical Patch Update. Users should upgrade to MySQL version 8.0.22 for Ubuntu 20.04 LTS and Ubuntu 20.10, or MySQL 5.7.32 for Ubuntu 16.04 LTS and Ubuntu 18.04 LTS. The vulnerability can be corrected by updating the system to these patched versions (Ubuntu Notice).