CVE-2020-2752: 
MySQL vulnerability analysis and mitigation

Vulnerability in the MySQL Client product of Oracle MySQL (component: C API) affects versions 5.6.47 and prior, 5.7.27 and prior, and 8.0.17 and prior. This difficult to exploit vulnerability allows low privileged attackers with network access via multiple protocols to compromise MySQL Client (Oracle CPUApr2020, NVD).

The vulnerability has a CVSS Base Score of 5.3 (Availability impacts) with the following vector: CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H. This indicates a network attack vector with high attack complexity, requiring low privileges and no user interaction. The scope is unchanged, with no impact to confidentiality or integrity but high impact to availability (Oracle CPUApr2020).

Successful exploitation of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Client (CVE Mitre).

Multiple vendors have released patches to address this vulnerability. MariaDB fixed it in versions 10.2.32, 10.3.23, and 10.4.13. MySQL addressed it in versions 5.6.48, 5.7.30, and 8.0.20. Users are strongly recommended to upgrade to these or later versions (Fedora Update, OpenSUSE Update).