CVE-2009-3723: High severity Sangoma Asterisk vulnerability
Published Oct 29, 2019
·Updated
asterisk allows calls on prohibited networks
Affected Software
6 affected componentsFixes available
Sangoma Asterisk>=1.6.1<1.6.1.8
Debian Debian Linux=8.0
Debian Debian Linux=9.0
Debian Debian Linux=10.0
Asterisk Open Source>=1.6.1<1.6.1.8
debian/asterisk
1:16.28.0~dfsg-0+deb11u41:16.28.0~dfsg-0+deb11u81:22.8.2+dfsg+~cs6.15.60671435-1
Event History
Oct 29, 2019
CVE Published
via MITRE·12:42 PM
Data Sourced
via MITRE·12:42 PM
DescriptionWeakness
Feb 17, 2026
Data Sourced
via Debian·08:25 PM
DescriptionAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2009-3723?
The severity of CVE-2009-3723 is high with a severity value of 7.5.
2
How does CVE-2009-3723 affect Asterisk Open Source?
CVE-2009-3723 allows calls on prohibited networks in Asterisk Open Source.
3
Which versions of Debian Debian Linux are affected by CVE-2009-3723?
CVE-2009-3723 affects Debian Debian Linux versions 8.0, 9.0, and 10.0.
4
How can I fix CVE-2009-3723 in Debian Asterisk package?
To fix CVE-2009-3723 in Debian Asterisk package, update to version 1:16.2.1~dfsg-1+deb10u2 or later.
5
Where can I find more information about CVE-2009-3723?
More information about CVE-2009-3723 can be found at the following references: [1] http://downloads.asterisk.org/pub/security/AST-2009-007.html, [2] https://access.redhat.com/security/cve/cve-2009-3723, [3] https://security-tracker.debian.org/tracker/CVE-2009-3723.