Asterisk Project Security Advisory – Two buffer overflows exist in the RTP payload handling code of Asterisk. Both overflows can be caused by an INVITE or any other SIP packet with SDP. The request may need to be authenticated depending on configuration of the Asterisk installation.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/64692/AST-2008-002.txt
Source: https://packetstormsecurity.com/files/64692/AST-2008-002.txt.html