CVE-2023-43782

See a problem?
Please try reporting it to the source first.

Source

https://cve.org/CVERecord?id=CVE-2023-43782

Import Source

https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2023-43782.json

JSON Data

https://api.test.osv.dev/v1/vulns/CVE-2023-43782

Downstream

MGASA-2023-0297

Published

2023-09-22T00:00:00Z

Modified

2026-05-19T07:53:36.622124Z

Summary

[none]

Details

Cadence through 0.9.2 2023-08-21 uses an Insecure /tmp/.cadence-aloop-daemon.x Temporary File. The file is used even if it has been created by a local adversary before Cadence started. The adversary can then delete the file, disrupting Cadence.

Database specific

{
    "cna_assigner": "mitre",
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/43xxx/CVE-2023-43782.json"
}

References

Affected packages

Git / github.com/falktx/cadence

Affected ranges

Type: GIT
Repo: https://github.com/falktx/cadence
Events: Introduced

0 Unknown introduced commit / All previous commits are affected

Fixed

2187c061bfa60c3b74d9023408b7b6f3325682c5

Affected versions

v0.*

v0.9.0

v0.9.1

Database specific

source

"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2023-43782.json"

vanir_signatures_modified

"2026-05-19T07:53:36Z"

vanir_signatures

[
    {
        "signature_type": "Line",
        "source": "https://github.com/falktx/cadence/commit/2187c061bfa60c3b74d9023408b7b6f3325682c5",
        "target": {
            "file": "c++/xycontroller/xycontroller.cpp"
        },
        "digest": {
            "line_hashes": [
                "249210686644172199810879820993273663544",
                "179197222663657034883179195383085334936",
                "21152985561342251489211478900676992149",
                "260126112507918260720387837423768871687",
                "269094252922245271973119980764760449218",
                "58693407574580258784455017354193869913",
                "23893165627726559034957703166079122138"
            ],
            "threshold": 0.9
        },
        "deprecated": false,
        "id": "CVE-2023-43782-75d31906",
        "signature_version": "v1"
    }
]