CVE-2020-2573

MediumCVSS 5.9/10Last modified Jun 17, 2026

Description

Vulnerability in the MySQL Client product of Oracle MySQL (component: C API). Supported versions that are affected are 5.7.28 and prior and 8.0.18 and prior. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise MySQL Client. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Client. CVSS 3.0 Base Score 5.9 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H).

Metrics

CVSS 3.1 5.9/10CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H

Affected software

Vendor	Product	Versions
Oracle Corporation	MySQL Server	5.7.28 and prior; 8.0.18 and prior

References

https://security.gentoo.org/glsa/202105-27Third Party Advisory
https://security.netapp.com/advisory/ntap-20200122-0002/Third Party Advisory
https://usn.ubuntu.com/4250-1/Third Party Advisory
https://www.oracle.com/security-alerts/cpujan2020.htmlPatch, Vendor Advisory
https://security.gentoo.org/glsa/202105-27Third Party Advisory
https://security.netapp.com/advisory/ntap-20200122-0002/Third Party Advisory
https://usn.ubuntu.com/4250-1/Third Party Advisory
https://www.oracle.com/security-alerts/cpujan2020.htmlPatch, Vendor Advisory

Timeline

Published: Jan 15, 2020
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2020

CVE-2020-257308.2Cross Site Scripting (XSS) vulnerability in ZoneMinder before version 1.34.21, allows remote attackers execute arbitrary code, escalate priv CVE-2020-257337.5webTareas through 2.1 allows upload of the dangerous .exe and .shtml file types.CVE-2020-257345.3webTareas through 2.1 allows files/Default/ Directory Listing.CVE-2020-257356.1webTareas through 2.1 allows XSS in clients/editclient.php, extensions/addextension.php, administration/add_announcement.php, administration CVE-2020-257367.8Acronis True Image 2019 update 1 through 2021 update 1 on macOS allows local privilege escalation due to an insecure XPC service configurati CVE-2020-257377.8An elevation of privilege vulnerability exists in Hackolade versions prior 4.2.0 on Windows has an issue in specific deployment scenarios th CVE-2020-257385.5CyberArk Endpoint Privilege Manager (EPM) 11.1.0.173 allows attackers to bypass a Credential Theft protection mechanism by injecting a DLL i CVE-2020-257396.1An issue was discovered in the gon gem before gon-6.4.0 for Ruby. MultiJson does not honor the escape_mode parameter to escape fields as an CVE-2020-25745.9Vulnerability in the MySQL Client product of Oracle MySQL (component: C API). Supported versions that are affected are 5.6.46 and prior, 5.7 CVE-2020-257413.2fdctrl_write_data in hw/block/fdc.c in QEMU 5.0.0 has a NULL pointer dereference via a NULL block pointer for the current drive.CVE-2020-257423.2pci_change_irq_level in hw/pci/pci.c in QEMU before 5.1.1 has a NULL pointer dereference because pci_get_bus() might not return a valid poin CVE-2020-257433.2hw/ide/pci.c in QEMU before 5.1.1 can trigger a NULL pointer dereference because it lacks a pointer check before an ide_cancel_dma_sync call