CVE-2020-2790

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Pluggable Auth). Supported versions that are affected are 5.7.28 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 6.5 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H).

• https://security.gentoo.org/glsa/202105-27Third Party Advisory
• https://security.netapp.com/advisory/ntap-20200416-0003/Third Party Advisory
• https://www.oracle.com/security-alerts/cpuapr2020.htmlVendor Advisory
• https://security.gentoo.org/glsa/202105-27Third Party Advisory
• https://security.netapp.com/advisory/ntap-20200416-0003/Third Party Advisory
• https://www.oracle.com/security-alerts/cpuapr2020.htmlVendor Advisory

Published

Apr 15, 2020

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2020-27894The issue was addressed with additional user controls. This …5.5
• CVE-2020-27895An information disclosure issue existed in the transition of…3.3
• CVE-2020-27896A path handling issue was addressed with improved validation…5.5
• CVE-2020-27897An out-of-bounds write issue was addressed with improved bou…7.8
• CVE-2020-27898A denial of service issue was addressed with improved state …5.5
• CVE-2020-27899A use after free issue was addressed with improved memory ma…7.8
• CVE-2020-27900An issue existed in the handling of snapshots. The issue was…5.5
• CVE-2020-27901A logic issue was addressed with improved restrictions. This…6.3
• CVE-2020-27902An authentication issue was addressed with improved state ma…4.6
• CVE-2020-27903This issue was addressed by removing the vulnerable code. Th…7.8
• CVE-2020-27904A logic issue existed resulting in memory corruption. This w…7.8
• CVE-2020-27905A memory corruption issue was addressed with improved state …7.8