Srtp before 1.5.3 is vulnerable to a potential DoS attack due to lack of bounds checking on RTP header CSRC count and extension header length (CVE-2015-6360).
{ "section": "core" }
"https://advisories.mageia.org/MGASA-2016-0037.json"