Improper input validation in MySQL Server - CVE-2020-2752

Vulnerability identifier: #VU26916

CSH Severity: Medium

CVSS v4: 6 [CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]

CVE-ID: CVE-2020-2752

CWE-ID: CWE-20

Exploitation vector: Remote access

Exploit availability: No public exploit available

The vulnerability allows a remote authenticated user to perform a denial of service (DoS) attack.

The vulnerability exists due to improper input validation within the C API component in MySQL Client. A remote authenticated user can exploit this vulnerability to perform a denial of service (DoS) attack.

MySQL Server
Gentoo Linux
Red Hat Enterprise Linux for Power, little endian
Red Hat Enterprise Linux for Scientific Computing
Red Hat Enterprise Linux for Power, big endian
Red Hat Enterprise Linux for IBM z Systems
Red Hat Enterprise Linux Desktop
Red Hat Enterprise Linux Server
Red Hat Enterprise Linux Workstation
Red Hat Enterprise Linux for ARM 64
Red Hat Enterprise Linux for x86_64
Anolis OS
Red Hat Enterprise Linux for x86_64 - Extended Update Support
Red Hat Enterprise Linux for IBM z Systems - Extended Update Support
Red Hat Enterprise Linux for Power, little endian - Extended Update Support
Red Hat Enterprise Linux for ARM 64 - Extended Update Support
Red Hat Enterprise Linux Server - TUS
Red Hat Enterprise Linux Server - AUS
Slackware Linux
Opensuse
Ubuntu
openEuler
Fedora
mariadb (Red Hat package)
Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions
Red Hat Enterprise Linux Server for x86_64 - Update Services for SAP Solutions
rh-mysql80-mysql (Red Hat package)
rh-mariadb102-mariadb (Red Hat package)
mariadb (Alpine package)
rh-mariadb102-galera (Red Hat package)
mariadb-connector-c
mariadb-connector-c-config
mariadb-connector-c-devel
mariadb-connector-c (Red Hat package)
mysql
mariadb-server (Ubuntu package)
mariadb
rh-mariadb103-mariadb (Red Hat package)
rh-mariadb103-galera (Red Hat package)
galera
Red Hat OpenShift Container Platform

Install updates from vendor's website.

MySQL Server - addressed in versions 5.7.28, 8.0.18
mariadb (Red Hat package) - update to 5.5.68-1.el7
rh-mysql80-mysql (Red Hat package) - update to 8.0.21-1.el7
rh-mariadb102-mariadb (Red Hat package) - addressed in versions 10.2.33-1.el6, 10.2.33-1.el7
mariadb (Alpine package) - update to 10.2.32-r0
rh-mariadb102-galera (Red Hat package) - addressed in versions 25.3.29-1.el6, 25.3.29-1.el7
mariadb-connector-c - addressed in versions 3.1.8-1.fc32, 3.1.11-1.fc31
mariadb-connector-c - update to 3.1.11-2
mariadb-connector-c-config - update to 3.1.11-2
mariadb-connector-c-devel - update to 3.1.11-2
mariadb-connector-c (Red Hat package) - addressed in versions 3.1.11-2.el8_0, 3.1.11-2.el8_1, 3.1.11-2.el8_2, 3.1.11-2.el8_3
Red Hat OpenShift Container Platform - update to 4.3.40
mysql - update to 8.0.22-3
mariadb-server (Ubuntu package) - addressed in versions 1:10.1.47-0ubuntu0.18.04.1, 1:10.3.25-0ubuntu0.20.04.1
mariadb - addressed in versions 10.3.25-1.fc31, 10.3.26-1.fc31, 10.3-3120201026103040.f636be4b, 10.3-3220201026103040.43bbeeef, 10.4.13-1.fc32, 10.4-3120200608100001.f636be4b, 10.4-3220200608100001.43bbeeef
rh-mariadb103-mariadb (Red Hat package) - update to 10.3.27-1.el7
rh-mariadb103-galera (Red Hat package) - update to 25.3.31-1.el7
galera - addressed in versions 25.3.31-1.fc31, 26.4.4-2.fc32

• https://www.oracle.com/security-alerts/cpuapr2020.html

• Multiple vulnerabilities in MySQL Server
• Slackware Linux update for mariadb
• OpenSUSE Linux update for mariadb
• Red Hat Software Collections update for rh-mysql80-mysql
• Improper input validation in mariadb (Alpine package)
• Red Hat Enterprise Linux 7 update for mariadb
• Red Hat Software Collections update for rh-mariadb102-mariadb and rh-mariadb102-galera
• Gentoo update for MariaDB
• Red Hat Enterprise Linux 8 update for mariadb-connector-c
• Red Hat Enterprise Linux TUS 8.0 update for the mariadb:10.3 module
• Red Hat Enterprise Linux TUS 8.2 update for mariadb-connector-c
• Red Hat Enterprise Linux 8.1 update for mariadb-connector-c
• Red Hat Enterprise Linux 8 update for mariadb-connector-c
• Red Hat Enterprise Linux 8 update for the mariadb:10.3 module
• Red Hat Enterprise Linux 8.1 update for the mariadb:10.3 module
• Gentoo update for MySQL
• Red Hat Software Collections update for rh-mariadb103-mariadb and rh-mariadb103-galera
• openEuler 20.03 LTS update for mysql
• Anolis OS update for mariadb-connector-c
• Ubuntu update for mariadb-10.1
• Red Hat Enterprise Linux 8 update for the mysql:8.0 module
• Red Hat Enterprise Linux 8 update for the mysql:8.0 module
• Multiple vulnerabilities in Red Hat OpenShift Container Platform 4.3
• Red Hat Enterprise Linux 8 update for the mariadb:10.3 module
• Fedora 32 update for galera, mariadb, mariadb-connector-c
• Fedora 32 Modular update for mariadb
• Fedora 31 Modular update for mariadb
• Fedora 32 Modular update for mariadb
• Fedora 31 update for mariadb
• Fedora 31 Modular update for mariadb
• Fedora 31 update for galera, mariadb, mariadb-connector-c