usrsctp before 2019-12-20 has out-of-bounds reads in sctp_load_addresses_from_init.
"https://storage.googleapis.com/cve-osv-conversion/alpine/ALPINE-CVE-2019-20503.json"