AZL-82673

See a problem?

Import Source

https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-82673.json

JSON Data

https://api.osv.dev/v1/vulns/AZL-82673

Upstream

CVE-2026-32588

Published

2026-04-07T17:16:28Z

Modified

2026-08-30T05:24:52Z

Summary

CVE-2026-32588 affecting package cassandra 5.0.0-2

Details

Authenticated DoS over CQL in Apache Cassandra 4.0, 4.1, 5.0 allows authenticated user to raise query latencies via repeated password changes. Users are recommended to upgrade to version 4.0.20, 4.1.11, 5.0.7, which fixes this issue.

References

https://nvd.nist.gov/vuln/detail/CVE-2026-32588

Affected packages

Azure Linux:3 / cassandra

Package

Name: cassandra
Purl: pkg:rpm/azure-linux/cassandra

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Last affected

5.0.0-2

Database specific

source

"https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-82673.json"