CVE-2020-2765: 
MySQL vulnerability analysis and mitigation

CVE-2020-2765 is a vulnerability in the MySQL Server product of Oracle MySQL, specifically affecting the Server: Optimizer component. The vulnerability affects MySQL versions 5.7.29 and prior, and 8.0.19 and prior. It is an easily exploitable vulnerability that allows high privileged attackers with network access via multiple protocols to compromise MySQL Server (Oracle CPU).

The vulnerability has a CVSS 3.0 Base Score of 4.9 (Medium severity) with the vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H). The vulnerability requires network access and high privileges for exploitation, but has low attack complexity and requires no user interaction (NetApp Security).

Successful exploitation of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server, affecting the availability of the system (Oracle CPU).

Oracle has released patches to address this vulnerability in MySQL versions 5.7.30 and 8.0.20. Users are strongly recommended to update to these or later versions. The fix was included in Oracle's Critical Patch Update (CPU) of April 2020 (Ubuntu Security).