CVE-2020-2898: 
MySQL vulnerability analysis and mitigation

CVE-2020-2898 is a vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Charsets) affecting version 8.0.19. This vulnerability was disclosed in April 2020 and is easily exploitable by high privileged attackers with network access via multiple protocols (CVE).

The vulnerability has a CVSS 3.0 Base Score of 4.9 (Medium) with the following vector: CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H. The attack requires network access, has low attack complexity, requires high privileges, needs no user interaction, has unchanged scope, and impacts only availability (NVD).

Successful exploitation of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server (Oracle).

The vulnerability is easily exploitable by attackers who have high privileges and network access through multiple protocols. The attack requires no user interaction but does need high-level privileges to execute (CVE).

The vulnerability was fixed in MySQL version 8.0.20. Users should upgrade to this version or later. Ubuntu users can update to mysql-server-8.0 version 8.0.20-0ubuntu0.20.04.1 for Ubuntu 20.04 and version 8.0.20-0ubuntu0.19.10.1 for Ubuntu 19.10 (Ubuntu).