FileZilla GnuTLS Multiple Vulnerabilities

Multiple vulnerabilities have been identified in FileZilla, which could be exploited by remote attackers to cause a denial of service or compromise an affected system.

1. Due to a NULL pointer dereference error when processing TLS packets containing multiple "Client Hello" messages, which could be exploited by unauthenticated attackers to crash a vulnerable application.

2. Due to a buffer overflow error when processing certain "Client Hello" messages containing a Server name extension, which could be exploited by unauthenticated attackers to crash an affected application or execute arbitrary code.

3. Due to an error in the "_gnutls_ciphertext2compressed()" [lib/gnutls_cipher.c] function when handling encrypted TLS data containig invalid Record lengths, which could be exploited by unauthenticated remote attackers to crash a vulnerable application.