CVE-2020-2762: 
MySQL vulnerability analysis and mitigation

A vulnerability was discovered in the MySQL Server product of Oracle MySQL, specifically affecting the InnoDB component. The vulnerability (CVE-2020-2762) affects MySQL versions 8.0.19 and prior. This security issue was disclosed in April 2020 as part of Oracle's Critical Patch Update (Oracle CPU).

The vulnerability has been assigned a CVSS 3.0 Base Score of 4.9 (Medium severity) with the following vector: CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H. The vulnerability is easily exploitable by a high-privileged attacker with network access via multiple protocols (NetApp Advisory).

Successful exploitation of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash, leading to a complete Denial of Service (DoS) of MySQL Server (Oracle CPU).

The vulnerability has been fixed in MySQL version 8.0.20. Multiple vendors have released patches for their affected products: Ubuntu has released updates for versions 16.04 LTS, 18.04 LTS, 19.10, and 20.04 LTS (Ubuntu Notice), Fedora has released updates for versions 30, 31, and 32 (Fedora Update), and NetApp has provided fixes for various affected products (NetApp Advisory).