similar to: AST-2017-008: RTP/RTCP information leak

Asterisk Project Security Advisory - AST-2017-012 Product Asterisk Summary Remote Crash Vulnerability in RTCP Stack Nature of Advisory Denial of Service Susceptibility Remote Unauthenticated Sessions Severity

Asterisk Project Security Advisory - AST-2017-005 Product Asterisk Summary Media takeover in RTP stack Nature of Advisory Unauthorized data disclosure Susceptibility Remote Unauthenticated Sessions Severity Critical

Hi: I have a linksys voip gateway connecting to an asterisk server ,when i dial a call from the linksys gateway to asterisk , i see repeated messages of a RTP errors ,and at same time i hear fake ring on the linksys?, This is wht i see on asterisk console?: ? -- Executing [9613070741 at direct:1] Set("SIP/03070741-088bd470", "CALLERID(number)=96170707070") in new stack ??? --

Hello list ! SETUP : Grandstream --sip--> Local Asterisk (NSLU) --iax--> Hosted Asterisk (VirtualDedicatedServer) --sip--> SIPprovider --> my CellPhone PROBLEM : I've noticed that when I put down the horn of my Grandstream it still takes a while for my GSM/CellPhone to stop ringing. INFORMATION : This is the output on the CLI of the local Asterisk-server : [Oct 3 17:40:33]

(hello all, this is my first writing. so please bear with me if I'm wrong anywhere.) orry to break too lately, but how is the RTP payload submission is going? could we see the new payload at March IETF? I agree that it would be fairy straightforward to make an RTP payload for ogg vorbis, assuming raw packets, AFAIK. using physical bitstream is, in this case, not adequate by the reasons in

Hello, Has anyone encountered that when Asterisk sends RTCP messages, it stops sending RTP packets until it gets an answer? Can that be fixed? Thanks.

Dear Sir, I'm running Asterisk 1.4.21.2 on a CentOS machine....When running asterisk -rvvvvv I can see a lot of messages about RTCP too short... -- Remote UNIX connection disconnected [Nov 28 13:33:00] WARNING[24863]: rtp.c:891 ast_rtcp_read: RTCP Read too short [Nov 28 13:33:00] WARNING[19803]: rtp.c:891 ast_rtcp_read: RTCP Read too short [Nov 28 13:33:00] WARNING[19803]: rtp.c:891

Hi, I am plying with * for 10 days now. I am testing with a couple of vocaltec h.323 gateways (FXO and PRI) cisco ata-186 (configured for SIP) and MSN messenger (SIP). They all seem to interoperate. However I have a problem when * is sending calls to the vocaltec gateways. Vocaltec gateways are monitoring the RTCP reports send from the remote gateway (in this case *) and if they don't get a

This article below came up on the newwire. The RTCP XR RFC was published. Will Asterisk be supporting this function in a future release? Does anyone know if any phone vendors are going to be supporting it? Thanks Lee Goodman Our Technology Update this week is about one of those mechanisms. Known as RTP Control Protocol Reporting Extensions (RTCP XR), the technology defines a standard way to

X-ECN Telecoms-MailScanner-Information: Please contact ECN Telecoms for more information X-ECN Telecoms-MailScanner: Found to be clean X-ECN Telecoms-MailScanner-From: yusuf at ecntelecoms.com X-Spam-Status: No My third try, humph! Yusuf wrote: > Hi, > > I am trying to understand the RTCP stats in Asterisk. > > 1. I am using the 'h' exten to store the RTCP records in

[Apr 15 11:12:19] ERROR[2624]: rtp.c:2447 ast_rtcp_write_sr: RTCP SR transmission error to aaa.bbb.ccc.ddd:37259, rtcp halted Operation not permitted [Apr 15 11:12:23] ERROR[2624]: rtp.c:2447 ast_rtcp_write_sr: RTCP SR transmission error to aaa.bbb.ccc.ddd:38563, rtcp halted Operation not permitted What is the specific nature of this traffic? Despite the above the call still functions. What

http://bugzilla.netfilter.org/show_bug.cgi?id=757 Summary: SIP connection helper not setting RTCP conntrack expectation Product: netfilter/iptables Version: linux-2.6.x Platform: i386 OS/Version: Ubuntu Status: NEW Severity: normal Priority: P5 Component: ip_conntrack

Hi, While looking for the cause of disturbance in call I found this error coming in console RTCP SR transmission error, rtcp halted Google search only shows some bug reports relating to MOH and Hold. What could cause this message? Could this be a symptom causing call disturbance? Where should I start digging to find out the reason for this error? I am using Asterisk 1.4.19 with zaptel 1.4.9.2

Dear all; I want to stop RTCP from Asterisk-server to phone. But I want to use RTP. I looked rtp.conf/sip.conf, but I can't know about it. Please tell me how to stop RTCP only. Because , when I access under NAT, my gateway shutdown the port as gateway received RTCP from server. I use Asterisk 1.6.2.6 or 1.4.29 . Also SIP/RTP. thx.

Hello! I want to get rtcp stats to cdr. (btw, I run asterisk 1.6.2.11) There is howto here http://www.voip-info.org/wiki/view/Asterisk+RTCP But I (and my users) do bridged calls from dahdi to sip, so in h extension channel is dahdi , and it doesn't contain rtcp stats. There is info about function shared. But I can't understand how to use it to put stats from sip channel to dahdi

Hi, It seems that asterisk doesn't send RTCP packets when a call is on hold. Is there any way to get asterisk to send these packets? I'm in the process of setting up a Lync (microsoft voice) server which will use an asterisk box as a gateway. The trunking between asterisk and lync is 'working' however when a call is put on hold asterisk stops sending RTCP packets to lync, and

I have a private network like this: +-----------------------+ | firewall | +-----------------------+ | +-----------------------+ | 1.2.3.4 |

Asterisk Project Security Advisory - AST-2017-006 Product Asterisk Summary Shell access command injection in app_minivm Nature of Advisory Unauthorized command execution Susceptibility Remote Authenticated Sessions Severity Moderate

Hello, We are using Asterisk 1.4 as call distribution system with simple queues for SIP calls. With high load (4000 calls/hour) some calls remain in queue forever (until queue's max wait time) in spite of being hung up already by the caller. It seems that when a BYE is lost, Asterisk has no mechanism to check whether a call is still active. Is there a way to activate a RTCP call control,

The Asterisk Development Team has announced security releases for Certified Asterisk 13.13 and Asterisk 13, 14 and 15. The available security releases are released as versions 13.13-cert9, 13.18.4, 14.7.4 and 15.1.4. These releases are available for immediate download at http://downloads.asterisk.org/pub/telephony/asterisk/releases The release of these versions resolves the following security