GnuTLS TLS Multiple Vulnerabilities

Multiple vulnerabilities have been identified in GnuTLS, which can be exploited by malicious people to potentially compromise an application using the library.

1. A vulnerability in GnuTLS libtasn1 Tiny ASN.1 library is caused due to certain functions (e.g. "asn1_der_decoding()") not properly checking ASN1 length result from the "asn1_get_length_der()" function. This can be exploited to cause the library to use a large length value and corrupt memory via e.g. a specially crafted X.509 client certificate.
2. An error within the block cipher decryption logic when handling TLS records can be exploited to corrupt memory via a specially crafted "GenericBlockCipher" structure.
3. Some errors in the libtasn1 library can be exploited to corrupt memory.