Yeonghyeon Choi

**Name of the Vulnerable Software and Affected Versions** Libreswan (affected versions not specified) **Description** Libreswan fails to correctly verify the authentication hash length when the SIG payload of an IKEv1 packet is encoded using PKCS #1 RSA Encryption. This occurs within the `RSA authenticate hash signature raw rsa()` function. A remote attacker can exploit this using a variation of the Bleichenbacher attack—a cryptographic attack targeting RSA encryption—to forge the SIG payload when small public exponents (such as `e=3`) are used, potentially leading to impersonation. Furthermore, by encoding a hash shorter than expected in the SIG payload, a remote attacker can trigger an assertion that causes the daemon to abort and restart, resulting in a sustained denial-of-service. Remote code execution is not possible, and X.509 certificate verifications of remote IKE peers remain unaffected. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Libreswan (affected versions not specified) **Description** Libreswan fails to correctly verify the DER encoding of the ASN.1 digest within the IKEv2 AUTH payload when using RSASSA-PKCS1-v1 5. This occurs in the `RSA authenticate hash signature pkcs1 1 5 rsa()` function. A remote attacker can exploit this using a variation of the Bleichenbacher attack—a method of attacking RSA encryption—to forge the AUTH payload when small public exponents (such as `e=3`) are used, allowing for impersonation. Furthermore, an attacker can cause a denial-of-service by encoding a hash shorter than expected in the AUTH payload, which triggers an assertion that causes the daemon to abort and restart. Remote code execution is not possible, and X.509 certificate verifications of the remote IKE peer remain unaffected. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** iOS versions prior to 15.7.8 iPadOS versions prior to 15.7.8 iOS versions prior to 16.6 iPadOS versions prior to 16.6 tvOS versions prior to 16.6 macOS Ventura versions prior to 13.5 Safari versions prior to 16.6 watchOS versions prior to 9.6 **Description** The issue is related to the processing of web content, which may disclose sensitive information. It is associated with the WebKitGTK+ and WPE WebKit modules in the operating systems iOS, iPadOS, tvOS, macOS, watchOS, and the browser Safari. Exploitation of this issue may allow a remote attacker to gain unauthorized access to protected information. **Recommendations** For iOS versions prior to 15.7.8, update to iOS 15.7.8 or later. For iPadOS versions prior to 15.7.8, update to iPadOS 15.7.8 or later. For iOS versions prior to 16.6, update to iOS 16.6 or later. For iPadOS versions prior to 16.6, update to iPadOS 16.6 or later. For tvOS versions prior to 16.6, update to tvOS 16.6 or later. For macOS Ventura versions prior to 13.5, update to macOS Ventura 13.5 or later. For Safari versions prior to 16.6, update to Safari 16.6 or later. For watchOS versions prior to 9.6, update to watchOS 9.6 or later.

**Name of the Vulnerable Software and Affected Versions** macOS Monterey versions 12.6.3 and earlier macOS Ventura versions 13.2 and earlier watchOS versions 9.3 and earlier macOS Big Sur versions 11.7.3 and earlier Safari versions 16.3 and earlier tvOS versions 16.3 and earlier iOS versions 16.3 and earlier iPadOS versions 16.3 and earlier **Description** The issue is related to improved memory handling and may lead to arbitrary code execution when processing maliciously crafted web content. A remote attacker may exploit this to access confidential data, compromise data integrity, and cause a denial of service. **Recommendations** For macOS Monterey versions prior to 12.6.3, update to version 12.6.3 or later. For macOS Ventura versions prior to 13.2, update to version 13.2 or later. For watchOS versions prior to 9.3, update to version 9.3 or later. For macOS Big Sur versions prior to 11.7.3, update to version 11.7.3 or later. For Safari versions prior to 16.3, update to version 16.3 or later. For tvOS versions prior to 16.3, update to version 16.3 or later. For iOS versions prior to 16.3, update to version 16.3 or later. For iPadOS versions prior to 16.3, update to version 16.3 or later.

**Name of the Vulnerable Software and Affected Versions** macOS Monterey versions 12.6.3 and earlier macOS Ventura versions 13.2 and earlier watchOS versions 9.3 and earlier macOS Big Sur versions 11.7.3 and earlier Safari versions 16.3 and earlier tvOS versions 16.3 and earlier iOS versions 16.3 and earlier iPadOS versions 16.3 and earlier **Description** The issue is related to improved memory handling and may lead to arbitrary code execution when processing maliciously crafted web content. It is associated with a buffer overflow in the WPE WebKit and WebKitGTK modules, allowing a remote attacker to access confidential data, compromise its integrity, and cause a denial of service. **Recommendations** For macOS Monterey versions prior to 12.6.3, update to version 12.6.3 or later. For macOS Ventura versions prior to 13.2, update to version 13.2 or later. For watchOS versions prior to 9.3, update to version 9.3 or later. For macOS Big Sur versions prior to 11.7.3, update to version 11.7.3 or later. For Safari versions prior to 16.3, update to version 16.3 or later. For tvOS versions prior to 16.3, update to version 16.3 or later. For iOS versions prior to 16.3, update to version 16.3 or later. For iPadOS versions prior to 16.3, update to version 16.3 or later.