Lucene search

K
ubuntucveUbuntu.comUB:CVE-2020-14878
HistoryOct 21, 2020 - 12:00 a.m.

CVE-2020-14878

2020-10-2100:00:00
ubuntu.com
ubuntu.com
10

8 High

CVSS3

Attack Vector

ADJACENT_NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

7.7 High

CVSS2

Access Vector

ADJACENT_NETWORK

Access Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:A/AC:L/Au:S/C:C/I:C/A:C

0.001 Low

EPSS

Percentile

32.0%

Vulnerability in the MySQL Server product of Oracle MySQL (component:
Server: Security: LDAP Auth). Supported versions that are affected are
8.0.21 and prior. Easily exploitable vulnerability allows low privileged
attacker with access to the physical communication segment attached to the
hardware where the MySQL Server executes to compromise MySQL Server.
Successful attacks of this vulnerability can result in takeover of MySQL
Server. CVSS 3.1 Base Score 8.0 (Confidentiality, Integrity and
Availability impacts). CVSS Vector:
(CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H).

Notes

Author Note
leosilva since 5.5 is no longer upstream supported and so far we cannot patch it, marking it as ignored.
OSVersionArchitecturePackageVersionFilename
ubuntu20.04noarchmysql-8.0< 8.0.22-0ubuntu0.20.04.2UNKNOWN
ubuntu20.10noarchmysql-8.0< 8.0.22-0ubuntu0.20.10.2UNKNOWN
ubuntu21.04noarchmysql-8.0< 8.0.22-0ubuntu0.20.10.2UNKNOWN
ubuntu21.10noarchmysql-8.0< 8.0.22-0ubuntu0.20.10.2UNKNOWN
ubuntu22.04noarchmysql-8.0< 8.0.22-0ubuntu0.20.10.2UNKNOWN
ubuntu22.10noarchmysql-8.0< 8.0.22-0ubuntu0.20.10.2UNKNOWN
ubuntu23.04noarchmysql-8.0< 8.0.22-0ubuntu0.20.10.2UNKNOWN
ubuntu23.10noarchmysql-8.0< 8.0.22-0ubuntu0.20.10.2UNKNOWN
ubuntu24.04noarchmysql-8.0< 8.0.22-0ubuntu0.20.10.2UNKNOWN
ubuntu16.04noarchpercona-server-5.6< anyUNKNOWN
Rows per page:
1-10 of 111

8 High

CVSS3

Attack Vector

ADJACENT_NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

7.7 High

CVSS2

Access Vector

ADJACENT_NETWORK

Access Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:A/AC:L/Au:S/C:C/I:C/A:C

0.001 Low

EPSS

Percentile

32.0%