Problem Description:
After dispatching a decrypt operation to OCF and receiving the
result, the wg(4) driver failed to check whether the MAC verification
step succeeded. The driver thus silently accepted packets with an
invalid Poly1305 authentication tag.
Impact:
A remote attacker who can send UDP packets to a WireGuard
endpoint, and who can guess the bounds of the receiver's replay
window, can inject forged or modified transport data packets into
the tunnel.
A remote attacker who can intercept WireGuard packets bound for a
FreeBSD host can modify the ciphertext and authenticated data without
detection by the receiver.