The vulnerability of the VLC Media Player software allows a malicious attacker to compromise the confidentiality, integrity, and accessibility of protected information.

Overfilling the buffer in the readserverhello function in lib/gnutlshandshake.c in GnuTLS allows remote servers to trigger a service failure a memory-related error or execute arbitrary code using the long session identifier in the ServerHello message...