CVE-2020-2752

Description

Vulnerability in the MySQL Client product of Oracle MySQL (component: C API). Supported versions that are affected are 5.6.47 and prior, 5.7.27 and prior and 8.0.17 and prior. Difficult to exploit vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Client. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Client. CVSS 3.0 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H).

Risk Information

Base Score
5.3
MODERATE
Vector
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H
EPSS Score
Exploitation Probability
0.195

Associated Vulnerability

VulnerabilityOS Platform
Vulnerabilities CVE-2020-2814,CVE-2020-2812,CVE-2020-2752,CVE-2020-2760 are fixed in MariaDB MariaDB 10.4.13Windows
Vulnerabilities CVE-2020-2814,CVE-2020-2812,CVE-2020-2752,CVE-2020-2760 are fixed in MariaDB MariaDB 10.3.23Windows
Vulnerabilities CVE-2020-2814,CVE-2020-2812,CVE-2020-2752,CVE-2020-2760 are fixed in MariaDB MariaDB 10.2.32Windows
Vulnerabilities CVE-2020-2752,CVE-2020-13249 are fixed in MariaDB MariaDB Connector/C 3.1.8Windows
Vulnerabilities CVE-2020-2814,CVE-2020-2812,CVE-2020-2752,CVE-2020-2760,CVE-2020-13249 are fixed in MariaDB MariaDB 10.3.23Windows
Vulnerabilities CVE-2020-2814,CVE-2020-2812,CVE-2020-2752,CVE-2020-2760,CVE-2020-13249 are fixed in MariaDB MariaDB 10.2.32Windows
Vulnerabilities CVE-2020-2814,CVE-2020-2812,CVE-2020-2752,CVE-2020-2760,CVE-2020-13249 are fixed in MariaDB MariaDB 10.4.13Windows
Vulnerabilities CVE-2020-2814,CVE-2020-2812,CVE-2020-2760,CVE-2020-2752,CVE-2020-13249 are fixed in MariaDB MariaDB 10.5.4Windows
Multiple Vulnerabilities are affected in Mysql 8.0.17Windows
Multiple Vulnerabilities are affected in Mysql 8.0.5Windows
Multiple Vulnerabilities are affected in IBM Security Guardium 10.5Windows
Multiple Vulnerabilities are affected in IBM Security Guardium 10.6Windows
Multiple Vulnerabilities are affected in IBM Security Guardium 11.1Windows
Multiple Vulnerabilities are affected in IBM Security Guardium 11.2Windows
Multiple Vulnerabilities are affected in IBM Security Guardium 11.0Windows
SUSE-SU-2020:1710-1(SUSE Linux Enterprise Server 12-SP4 ) mariadb-10.2.32-3.28.2.x86_64.rpmLinux
SUSE-SU-2020:1710-1(SUSE Linux Enterprise Server 12-SP5 ) mariadb-10.2.32-3.28.2.x86_64_SP5.rpmLinux
SUSE-SU-2020:1710-1(SUSE Linux Enterprise Server 12-SP4 ) mariadb-client-10.2.32-3.28.2.x86_64.rpmLinux
SUSE-SU-2020:1710-1(SUSE Linux Enterprise Server 12-SP5 ) mariadb-client-10.2.32-3.28.2.x86_64_SP5.rpmLinux
SUSE-SU-2020:1710-1(SUSE Linux Enterprise Server 12-SP4 ) mariadb-client-debuginfo-10.2.32-3.28.2.x86_64.rpmLinux
SUSE-SU-2020:1710-1(SUSE Linux Enterprise Server 12-SP5 ) mariadb-client-debuginfo-10.2.32-3.28.2.x86_64_SP5.rpmLinux
SUSE-SU-2020:1710-1(SUSE Linux Enterprise Server 12-SP4 ) mariadb-debuginfo-10.2.32-3.28.2.x86_64.rpmLinux
SUSE-SU-2020:1710-1(SUSE Linux Enterprise Server 12-SP5 ) mariadb-debuginfo-10.2.32-3.28.2.x86_64_SP5.rpmLinux
SUSE-SU-2020:1710-1(SUSE Linux Enterprise Server 12-SP4 ) mariadb-debugsource-10.2.32-3.28.2.x86_64.rpmLinux
SUSE-SU-2020:1710-1(SUSE Linux Enterprise Server 12-SP4 ) mariadb-errormessages-10.2.32-3.28.2.noarch.rpmLinux
SUSE-SU-2020:1710-1(SUSE Linux Enterprise Server 12-SP5 ) mariadb-debugsource-10.2.32-3.28.2.x86_64_SP5.rpmLinux
SUSE-SU-2020:1710-1(SUSE Linux Enterprise Server 12-SP5 ) mariadb-errormessages-10.2.32-3.28.2.noarch_SP5.rpmLinux
SUSE-SU-2020:1710-1(SUSE Linux Enterprise Server 12-SP4 ) mariadb-tools-10.2.32-3.28.2.x86_64.rpmLinux
SUSE-SU-2020:1710-1(SUSE Linux Enterprise Server 12-SP5 ) mariadb-tools-10.2.32-3.28.2.x86_64_SP5.rpmLinux
SUSE-SU-2020:1710-1(SUSE Linux Enterprise Server 12-SP4 ) mariadb-tools-debuginfo-10.2.32-3.28.2.x86_64.rpmLinux
SUSE-SU-2020:1710-1(SUSE Linux Enterprise Server 12-SP5 ) mariadb-tools-debuginfo-10.2.32-3.28.2.x86_64_SP5.rpmLinux
(RHSA-2020:3732) mysql:8.0 security update mysql-8.0.21-1.module+el8.2.0+7855+47abd494.x86_64.rpmLinux
(RHSA-2020:3732) mysql:8.0 security update mysql-common-8.0.21-1.module+el8.2.0+7855+47abd494.x86_64.rpmLinux
(RHSA-2020:3732) mysql:8.0 security update mysql-debugsource-8.0.21-1.module+el8.2.0+7855+47abd494.x86_64.rpmLinux
(RHSA-2020:3732) mysql:8.0 security update mysql-devel-8.0.21-1.module+el8.2.0+7855+47abd494.x86_64.rpmLinux
(RHSA-2020:3732) mysql:8.0 security update mysql-errmsg-8.0.21-1.module+el8.2.0+7855+47abd494.x86_64.rpmLinux
(RHSA-2020:3732) mysql:8.0 security update mysql-libs-8.0.21-1.module+el8.2.0+7855+47abd494.x86_64.rpmLinux
(RHSA-2020:3732) mysql:8.0 security update mysql-server-8.0.21-1.module+el8.2.0+7855+47abd494.x86_64.rpmLinux
(RHSA-2020:3732) mysql:8.0 security update mysql-test-8.0.21-1.module+el8.2.0+7855+47abd494.x86_64.rpmLinux
(RHSA-2020:4026) mariadb security and bug fix update mariadb-5.5.68-1.el7.x86_64.rpmLinux
(RHSA-2020:4026) mariadb security and bug fix update mariadb-bench-5.5.68-1.el7.x86_64.rpmLinux
(RHSA-2020:4026) mariadb security and bug fix update mariadb-devel-5.5.68-1.el7.i686.rpmLinux
(RHSA-2020:4026) mariadb security and bug fix update mariadb-devel-5.5.68-1.el7.x86_64.rpmLinux
(RHSA-2020:4026) mariadb security and bug fix update mariadb-embedded-5.5.68-1.el7.i686.rpmLinux
(RHSA-2020:4026) mariadb security and bug fix update mariadb-embedded-5.5.68-1.el7.x86_64.rpmLinux
(RHSA-2020:4026) mariadb security and bug fix update mariadb-embedded-devel-5.5.68-1.el7.i686.rpmLinux
(RHSA-2020:4026) mariadb security and bug fix update mariadb-embedded-devel-5.5.68-1.el7.x86_64.rpmLinux
(RHSA-2020:4026) mariadb security and bug fix update mariadb-libs-5.5.68-1.el7.i686.rpmLinux
(RHSA-2020:4026) mariadb security and bug fix update mariadb-libs-5.5.68-1.el7.x86_64.rpmLinux
(RHSA-2020:4026) mariadb security and bug fix update mariadb-server-5.5.68-1.el7.x86_64.rpmLinux
(RHSA-2020:4026) mariadb security and bug fix update mariadb-test-5.5.68-1.el7.x86_64.rpmLinux
MariaDB database (USN-4603-1) mariadb-server_10.1.47-0ubuntu0.18.04.1_all.debLinux
MariaDB database (USN-4603-1) mariadb-server_10.3.25-0ubuntu0.20.04.1_all.debLinux
Vulnerabilities CVE-2020-2814,CVE-2020-2812,CVE-2020-2752,CVE-2020-2760 are fixed in MariaDB MariaDB 10.4.13 (For Linux)Linux
Vulnerabilities CVE-2020-2814,CVE-2020-2812,CVE-2020-2752,CVE-2020-2760 are fixed in MariaDB MariaDB 10.3.23 (For Linux)Linux
Vulnerabilities CVE-2020-2814,CVE-2020-2812,CVE-2020-2752,CVE-2020-2760 are fixed in MariaDB MariaDB 10.2.32 (For Linux)Linux
Vulnerabilities CVE-2020-2752,CVE-2020-13249 are fixed in MariaDB MariaDB Connector/C 3.1.8 (For Linux)Linux
Vulnerabilities CVE-2020-2814,CVE-2020-2812,CVE-2020-2752,CVE-2020-2760,CVE-2020-13249 are fixed in MariaDB MariaDB 10.3.23 (For Linux)Linux
Vulnerabilities CVE-2020-2814,CVE-2020-2812,CVE-2020-2752,CVE-2020-2760,CVE-2020-13249 are fixed in MariaDB MariaDB 10.2.32 (For Linux)Linux
Vulnerabilities CVE-2020-2814,CVE-2020-2812,CVE-2020-2752,CVE-2020-2760,CVE-2020-13249 are fixed in MariaDB MariaDB 10.4.13 (For Linux)Linux
Vulnerabilities CVE-2020-2814,CVE-2020-2812,CVE-2020-2760,CVE-2020-2752,CVE-2020-13249 are fixed in MariaDB MariaDB 10.5.4 (For Linux)Linux
(RHSA-2020:5500) mariadb:10.3 security, bug fix, and enhancement update galera-25.3.31-1.module+el8.3.0+8843+3f4e42f6.x86_64.rpmLinux
(RHSA-2020:5500) mariadb:10.3 security, bug fix, and enhancement update galera-debugsource-25.3.31-1.module+el8.3.0+8843+3f4e42f6.x86_64.rpmLinux
(RHSA-2020:5500) mariadb:10.3 security, bug fix, and enhancement update mariadb-10.3.27-3.module+el8.3.0+8972+5e3224e9.x86_64.rpmLinux
(RHSA-2020:5500) mariadb:10.3 security, bug fix, and enhancement update mariadb-backup-10.3.27-3.module+el8.3.0+8972+5e3224e9.x86_64.rpmLinux
(RHSA-2020:5500) mariadb:10.3 security, bug fix, and enhancement update mariadb-common-10.3.27-3.module+el8.3.0+8972+5e3224e9.x86_64.rpmLinux
(RHSA-2020:5500) mariadb:10.3 security, bug fix, and enhancement update mariadb-debugsource-10.3.27-3.module+el8.3.0+8972+5e3224e9.x86_64.rpmLinux
(RHSA-2020:5500) mariadb:10.3 security, bug fix, and enhancement update mariadb-devel-10.3.27-3.module+el8.3.0+8972+5e3224e9.x86_64.rpmLinux
(RHSA-2020:5500) mariadb:10.3 security, bug fix, and enhancement update mariadb-embedded-10.3.27-3.module+el8.3.0+8972+5e3224e9.x86_64.rpmLinux
(RHSA-2020:5500) mariadb:10.3 security, bug fix, and enhancement update mariadb-embedded-devel-10.3.27-3.module+el8.3.0+8972+5e3224e9.x86_64.rpmLinux
(RHSA-2020:5500) mariadb:10.3 security, bug fix, and enhancement update mariadb-errmsg-10.3.27-3.module+el8.3.0+8972+5e3224e9.x86_64.rpmLinux
(RHSA-2020:5500) mariadb:10.3 security, bug fix, and enhancement update mariadb-gssapi-server-10.3.27-3.module+el8.3.0+8972+5e3224e9.x86_64.rpmLinux
(RHSA-2020:5500) mariadb:10.3 security, bug fix, and enhancement update mariadb-oqgraph-engine-10.3.27-3.module+el8.3.0+8972+5e3224e9.x86_64.rpmLinux
(RHSA-2020:5500) mariadb:10.3 security, bug fix, and enhancement update mariadb-server-10.3.27-3.module+el8.3.0+8972+5e3224e9.x86_64.rpmLinux
(RHSA-2020:5500) mariadb:10.3 security, bug fix, and enhancement update mariadb-server-galera-10.3.27-3.module+el8.3.0+8972+5e3224e9.x86_64.rpmLinux
(RHSA-2020:5500) mariadb:10.3 security, bug fix, and enhancement update mariadb-server-utils-10.3.27-3.module+el8.3.0+8972+5e3224e9.x86_64.rpmLinux
(RHSA-2020:5500) mariadb:10.3 security, bug fix, and enhancement update mariadb-test-10.3.27-3.module+el8.3.0+8972+5e3224e9.x86_64.rpmLinux
(RHSA-2020:5503) mariadb-connector-c security, bug fix, and enhancement update mariadb-connector-c-3.1.11-2.el8_3.i686.rpmLinux
(RHSA-2020:5503) mariadb-connector-c security, bug fix, and enhancement update mariadb-connector-c-3.1.11-2.el8_3.x86_64.rpmLinux
(RHSA-2020:5503) mariadb-connector-c security, bug fix, and enhancement update mariadb-connector-c-config-3.1.11-2.el8_3.noarch.rpmLinux
(RHSA-2020:5503) mariadb-connector-c security, bug fix, and enhancement update mariadb-connector-c-debugsource-3.1.11-2.el8_3.i686.rpmLinux
(RHSA-2020:5503) mariadb-connector-c security, bug fix, and enhancement update mariadb-connector-c-debugsource-3.1.11-2.el8_3.x86_64.rpmLinux
(RHSA-2020:5503) mariadb-connector-c security, bug fix, and enhancement update mariadb-connector-c-devel-3.1.11-2.el8_3.i686.rpmLinux
(RHSA-2020:5503) mariadb-connector-c security, bug fix, and enhancement update mariadb-connector-c-devel-3.1.11-2.el8_3.x86_64.rpmLinux
(CESA-2020:4026) mariadb security and bug fix update mariadb-5.5.68-1.el7.x86_64.rpmLinux
(CESA-2020:4026) mariadb security and bug fix update mariadb-bench-5.5.68-1.el7.x86_64.rpmLinux
(CESA-2020:4026) mariadb security and bug fix update mariadb-devel-5.5.68-1.el7.x86_64.rpmLinux
(CESA-2020:4026) mariadb security and bug fix update mariadb-embedded-5.5.68-1.el7.x86_64.rpmLinux
(CESA-2020:4026) mariadb security and bug fix update mariadb-embedded-devel-5.5.68-1.el7.x86_64.rpmLinux
(CESA-2020:4026) mariadb security and bug fix update mariadb-libs-5.5.68-1.el7.x86_64.rpmLinux
(CESA-2020:4026) mariadb security and bug fix update mariadb-server-5.5.68-1.el7.x86_64.rpmLinux
(CESA-2020:4026) mariadb security and bug fix update mariadb-test-5.5.68-1.el7.x86_64.rpmLinux
Multiple Vulnerabilities are affected in Mysql 8.0.17 (For Linux)Linux
Multiple Vulnerabilities are affected in Mysql 8.0.5 (For Linux)Linux
SUSE-SU-2020:1798-1(SUSE Linux Enterprise Server 12-SP5) libmysqlclient18-10.0.40.4-2.20.1.x86_64.rpmLinux
SUSE-SU-2020:1798-1(SUSE Linux Enterprise Server 12-SP5) libmysqlclient18-32bit-10.0.40.4-2.20.1.x86_64.rpmLinux
SUSE-SU-2020:1798-1(SUSE Linux Enterprise Server 12-SP5) libmysqlclient18-debuginfo-10.0.40.4-2.20.1.x86_64.rpmLinux
SUSE-SU-2020:1798-1(SUSE Linux Enterprise Server 12-SP5) libmysqlclient18-debuginfo-32bit-10.0.40.4-2.20.1.x86_64.rpmLinux
SUSE-SU-2020:1798-1(SUSE Linux Enterprise Server 12-SP5) mariadb-100-debuginfo-10.0.40.4-2.20.1.x86_64.rpmLinux
SUSE-SU-2020:1798-1(SUSE Linux Enterprise Server 12-SP5) mariadb-100-debugsource-10.0.40.4-2.20.1.x86_64.rpmLinux
SUSE-SU-2020:1798-1(SUSE Linux Enterprise Server 12-SP5) mariadb-100-errormessages-10.0.40.4-2.20.1.x86_64.rpmLinux
(RHSA-2020:4026)Moderate: security and bug fix update mariadb-debuginfo-5.5.68-1.el7.i686.rpmLinux
(RHSA-2020:4026)Moderate: security and bug fix update mariadb-debuginfo-5.5.68-1.el7.x86_64.rpmLinux
(RHSA-2020:5503)Moderate: security, bug fix, and enhancement update mariadb-connector-c-debuginfo-3.1.11-2.el8_3.i686.rpmLinux
(RHSA-2020:5503)Moderate: security, bug fix, and enhancement update mariadb-connector-c-debuginfo-3.1.11-2.el8_3.x86_64.rpmLinux
(RHSA-2020:5503)Moderate: security, bug fix, and enhancement update mariadb-connector-c-devel-debuginfo-3.1.11-2.el8_3.i686.rpmLinux
(RHSA-2020:5503)Moderate: security, bug fix, and enhancement update mariadb-connector-c-devel-debuginfo-3.1.11-2.el8_3.x86_64.rpmLinux
mariadb-connector-c security, bug fix, and enhancement update (RLSA-2020:5503) mariadb-connector-c-3.1.11-2.el8_3.i686.rpmLinux
mariadb-connector-c security, bug fix, and enhancement update (RLSA-2020:5503) mariadb-connector-c-3.1.11-2.el8_3.x86_64.rpmLinux
mariadb-connector-c security, bug fix, and enhancement update (RLSA-2020:5503) mariadb-connector-c-devel-3.1.11-2.el8_3.i686.rpmLinux
mariadb-connector-c security, bug fix, and enhancement update (RLSA-2020:5503) mariadb-connector-c-devel-3.1.11-2.el8_3.x86_64.rpmLinux
mariadb-connector-c security, bug fix, and enhancement update (RLSA-2020:5503) mariadb-connector-c-config-3.1.11-2.el8_3.noarch.rpmLinux
Mariadb update (ELSA-2020-4026) mariadb-5.5.68-1.el7.x86_64.rpmLinux
Mariadb-bench update (ELSA-2020-4026) mariadb-bench-5.5.68-1.el7.x86_64.rpmLinux
Mariadb-devel update (ELSA-2020-4026) mariadb-devel-5.5.68-1.el7.i686.rpmLinux
Mariadb-devel update (ELSA-2020-4026) mariadb-devel-5.5.68-1.el7.x86_64.rpmLinux
Mariadb-libs update (ELSA-2020-4026) mariadb-libs-5.5.68-1.el7.i686.rpmLinux
Mariadb-libs update (ELSA-2020-4026) mariadb-libs-5.5.68-1.el7.x86_64.rpmLinux
Mariadb-server update (ELSA-2020-4026) mariadb-server-5.5.68-1.el7.x86_64.rpmLinux
Mariadb-test update (ELSA-2020-4026) mariadb-test-5.5.68-1.el7.x86_64.rpmLinux
Mariadb-connector-c update (ELSA-2020-5503-1) mariadb-connector-c-3.1.11-2.el8_3.i686.rpmLinux
Mariadb-connector-c update (ELSA-2020-5503-1) mariadb-connector-c-3.1.11-2.el8_3.x86_64.rpmLinux
Mariadb-connector-c-config update (ELSA-2020-5503-1) mariadb-connector-c-config-3.1.11-2.el8_3.noarch.rpmLinux
Mariadb-connector-c-devel update (ELSA-2020-5503-1) mariadb-connector-c-devel-3.1.11-2.el8_3.i686.rpmLinux
Mariadb-connector-c-devel update (ELSA-2020-5503-1) mariadb-connector-c-devel-3.1.11-2.el8_3.x86_64.rpmLinux
Moderate: mariadb-connector-c security, bug fix, and enhancement update mariadb-connector-c-3.1.11-2.el8_3.i686.rpmLinux
Moderate: mariadb-connector-c security, bug fix, and enhancement update mariadb-connector-c-3.1.11-2.el8_3.x86_64.rpmLinux
Moderate: mariadb-connector-c security, bug fix, and enhancement update mariadb-connector-c-config-3.1.11-2.el8_3.noarch.rpmLinux
Moderate: mariadb-connector-c security, bug fix, and enhancement update mariadb-connector-c-devel-3.1.11-2.el8_3.i686.rpmLinux
Moderate: mariadb-connector-c security, bug fix, and enhancement update mariadb-connector-c-devel-3.1.11-2.el8_3.x86_64.rpmLinux
CVE-2020-2752NCM

Patch Details

No records found

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234