Gentoo Linux Security Advisory GLSA 200704-01 – The Madynes research team at INRIA has discovered that Asterisk contains a null pointer dereferencing error in the SIP channel when handling INVITE messages. Furthermore qwerty1979 discovered that Asterisk 1.2.x fails to properly handle SIP responses with return code 0. Versions less than 1.2.14-r2 are affected.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/55560/glsa-200704-01.txt
Source: https://packetstormsecurity.com/files/55560/Gentoo-Linux-Security-Advisory-200704-1.html