kritisch
CVE-2025-10230
samba: Command Injection in WINS Server Hook Script
In der Trivy Database seit spätestens 24. Okt. 2026, 07:11 UTCWann der Eintrag vor diesem Build hinzukam, ist nicht erfasst.
Einstufung nach Quelle
Red Hat10.0CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
Trivys eigenes Label ist CRITICAL. Kritisch laut Red Hat, Photon OS. Niedriger laut Ubuntu (mittel).
Beschreibung
A flaw was found in Samba, in the front-end WINS hook handling: NetBIOS names from registration packets are passed to a shell without proper validation or escaping. Unsanitized NetBIOS name data from WINS registration packets are inserted into a shell command and executed by the Samba Active Directory Domain Controller’s wins hook, allowing an unauthenticated network attacker to achieve remote command execution as the Samba process.
Betroffene Pakete und behobene Versionen
| Quelle | Paket | Behoben in |
|---|---|---|
| Photon OS 4.0 | libwbclient, libwbclient-devel, samba-client und 2 weitere | 4.19.3-2.ph4 |
| Photon OS 5.0 | libwbclient, libwbclient-devel, samba-client und 2 weitere | 4.19.3-4.ph5 |
| alpine 3.22 | samba | 4.21.9-r0 |
| alpine 3.23 | samba | 4.21.9-r0 |
| alpine 3.24 | samba | 4.21.9-r0 |
| alpine edge | samba | 4.21.9-r0 |
| debian 11 | samba | kein Fix angegeben |
| debian 12 | samba | 2:4.17.12+dfsg-0+deb12u3 |
| debian 13 | samba | 2:4.22.6+dfsg-0+deb13u1 |
| debian 14 | samba | 2:4.23.2+dfsg-1 |
| echo | samba | 2:4.17.12+dfsg-0+deb12u3 |
| rapidfort debian 12 | samba | 0:4.22.6+dfsg-0+deb13u1, 2:4.17.12+dfsg-0+deb12u3, 2:4.23.2+dfsg-1 |
Alle 82 Einträge aus 25 Quellen zeigen
| Quelle | Paket | Behoben in |
|---|---|---|
| Photon OS 4.0 | libwbclient | 4.19.3-2.ph4 |
| Photon OS 4.0 | libwbclient-devel | 4.19.3-2.ph4 |
| Photon OS 4.0 | samba-client | 4.19.3-2.ph4 |
| Photon OS 4.0 | samba-client-devel | 4.19.3-2.ph4 |
| Photon OS 4.0 | samba-client-libs | 4.19.3-2.ph4 |
| Photon OS 5.0 | libwbclient | 4.19.3-4.ph5 |
| Photon OS 5.0 | libwbclient-devel | 4.19.3-4.ph5 |
| Photon OS 5.0 | samba-client | 4.19.3-4.ph5 |
| Photon OS 5.0 | samba-client-devel | 4.19.3-4.ph5 |
| Photon OS 5.0 | samba-client-libs | 4.19.3-4.ph5 |
| alpine 3.22 | samba | 4.21.9-r0 |
| alpine 3.23 | samba | 4.21.9-r0 |
| alpine 3.24 | samba | 4.21.9-r0 |
| alpine edge | samba | 4.21.9-r0 |
| debian 11 | samba | kein Fix angegeben |
| debian 12 | samba | 2:4.17.12+dfsg-0+deb12u3 |
| debian 13 | samba | 2:4.22.6+dfsg-0+deb13u1 |
| debian 14 | samba | 2:4.23.2+dfsg-1 |
| echo | samba | 2:4.17.12+dfsg-0+deb12u3 |
| rapidfort debian 12 | samba | 0:4.22.6+dfsg-0+deb13u1, 2:4.17.12+dfsg-0+deb12u3, 2:4.23.2+dfsg-1 |
| rapidfort debian 13 | samba | 0:4.22.6+dfsg-0+deb13u1, 2:4.17.12+dfsg-0+deb12u3, 2:4.23.2+dfsg-1 |
| rapidfort fedora 43 | ctdb-ceph-mutex | 2:4.23.2-1.fc43 |
| rapidfort fedora 43 | ctdb-pcp-pmda | 2:4.23.2-1.fc43 |
| rapidfort fedora 43 | ldb-tools | 2:4.23.2-1.fc43 |
| rapidfort fedora 43 | libldb-devel | 2:4.23.2-1.fc43 |
| rapidfort fedora 43 | libnetapi | 2:4.23.2-1.fc43 |
| rapidfort fedora 43 | libnetapi-devel | 2:4.23.2-1.fc43 |
| rapidfort fedora 43 | libsmbclient | 2:4.23.2-1.fc43 |
| rapidfort fedora 43 | libsmbclient-devel | 2:4.23.2-1.fc43 |
| rapidfort fedora 43 | libwbclient | 2:4.23.2-1.fc43 |
| rapidfort fedora 43 | libwbclient-devel | 2:4.23.2-1.fc43 |
| rapidfort fedora 43 | python3-ldb | 2:4.23.2-1.fc43 |
| rapidfort fedora 43 | python3-samba | 2:4.23.2-1.fc43 |
| rapidfort fedora 43 | python3-samba-dc | 2:4.23.2-1.fc43 |
| rapidfort fedora 43 | python3-samba-test | 2:4.23.2-1.fc43 |
| rapidfort fedora 43 | rf-libwbclient | 2:4.23.2-1.fc43 |
| rapidfort fedora 43 | rf-samba | 2:4.23.2-1.fc43 |
| rapidfort fedora 43 | samba | 2:4.23.2-1.fc43 |
| rapidfort fedora 43 | samba-client | 2:4.23.2-1.fc43 |
| rapidfort fedora 43 | samba-client-libs | 2:4.23.2-1.fc43 |
| rapidfort fedora 43 | samba-common | 2:4.23.2-1.fc43 |
| rapidfort fedora 43 | samba-common-libs | 2:4.23.2-1.fc43 |
| rapidfort fedora 43 | samba-common-tools | 2:4.23.2-1.fc43 |
| rapidfort fedora 43 | samba-dc | 2:4.23.2-1.fc43 |
| rapidfort fedora 43 | samba-dc-bind-dlz | 2:4.23.2-1.fc43 |
| rapidfort fedora 43 | samba-dc-libs | 2:4.23.2-1.fc43 |
| rapidfort fedora 43 | samba-dc-provision | 2:4.23.2-1.fc43 |
| rapidfort fedora 43 | samba-dcerpc | 2:4.23.2-1.fc43 |
| rapidfort fedora 43 | samba-devel | 2:4.23.2-1.fc43 |
| rapidfort fedora 43 | samba-gpupdate | 2:4.23.2-1.fc43 |
| rapidfort fedora 43 | samba-krb5-printing | 2:4.23.2-1.fc43 |
| rapidfort fedora 43 | samba-ldb-ldap-modules | 2:4.23.2-1.fc43 |
| rapidfort fedora 43 | samba-libs | 2:4.23.2-1.fc43 |
| rapidfort fedora 43 | samba-pidl | 2:4.23.2-1.fc43 |
| rapidfort fedora 43 | samba-prometheus | 2:4.23.2-1.fc43 |
| rapidfort fedora 43 | samba-test | 2:4.23.2-1.fc43 |
| rapidfort fedora 43 | samba-test-libs | 2:4.23.2-1.fc43 |
| rapidfort fedora 43 | samba-tools | 2:4.23.2-1.fc43 |
| rapidfort fedora 43 | samba-usershares | 2:4.23.2-1.fc43 |
| rapidfort fedora 43 | samba-vfs-cephfs | 2:4.23.2-1.fc43 |
| rapidfort fedora 43 | samba-vfs-glusterfs | 2:4.23.2-1.fc43 |
| rapidfort fedora 43 | samba-vfs-iouring | 2:4.23.2-1.fc43 |
| rapidfort fedora 43 | samba-winbind | 2:4.23.2-1.fc43 |
| rapidfort fedora 43 | samba-winbind-clients | 2:4.23.2-1.fc43 |
| rapidfort fedora 43 | samba-winbind-krb5-locator | 2:4.23.2-1.fc43 |
| rapidfort fedora 43 | samba-winbind-modules | 2:4.23.2-1.fc43 |
| rapidfort fedora 43 | samba-winexe | 2:4.23.2-1.fc43 |
| rapidfort ubuntu 20.04 | rf-samba | 2:4.15.13+dfsg-0ubuntu1.10, 2:4.19.5+dfsg-4ubuntu9.4 |
| rapidfort ubuntu 20.04 | samba | 2:4.15.13+dfsg-0ubuntu1.10, 2:4.19.5+dfsg-4ubuntu9.4 |
| rapidfort ubuntu 22.04 | rf-samba | 2:4.15.13+dfsg-0ubuntu1.10, 2:4.19.5+dfsg-4ubuntu9.4 |
| rapidfort ubuntu 22.04 | samba | 2:4.15.13+dfsg-0ubuntu1.10, 2:4.19.5+dfsg-4ubuntu9.4 |
| rapidfort ubuntu 24.04 | rf-samba | 2:4.15.13+dfsg-0ubuntu1.10, 2:4.19.5+dfsg-4ubuntu9.4 |
| rapidfort ubuntu 24.04 | samba | 2:4.15.13+dfsg-0ubuntu1.10, 2:4.19.5+dfsg-4ubuntu9.4 |
| root.io debian 12 | rootio-samba | 2:4.17.12+dfsg-0+deb12u3 |
| root.io debian 12 | samba | 2:4.17.12+dfsg-0+deb12u3 |
| ubuntu 16.04-ESM | samba | 2:4.3.11+dfsg-0ubuntu0.16.04.34+esm4 |
| ubuntu 18.04-ESM | samba | 2:4.7.6+dfsg~ubuntu-0ubuntu2.29+esm3 |
| ubuntu 20.04-ESM | samba | 2:4.15.13+dfsg-0ubuntu0.20.04.8+esm1 |
| ubuntu 22.04 | samba | 2:4.15.13+dfsg-0ubuntu1.10 |
| ubuntu 24.04 | samba | 2:4.19.5+dfsg-4ubuntu9.4 |
| ubuntu 25.04 | samba | 2:4.21.4+dfsg-1ubuntu3.5 |
| ubuntu 25.10 | samba | 2:4.22.3+dfsg-4ubuntu2.1 |
Referenzen
- https://access.redhat.com/security/cve/CVE-2025-10230
- https://bugzilla.redhat.com/show_bug.cgi?id=2394377
- https://nvd.nist.gov/vuln/detail/CVE-2025-10230
- https://ubuntu.com/security/notices/USN-7826-1
- https://ubuntu.com/security/notices/USN-7826-2
- https://www.cve.org/CVERecord?id=CVE-2025-10230
- https://www.samba.org/samba/history/security.html
- https://www.vicarius.io/vsociety/posts/cve-2025-10230-detect-samba-vulnerability