crítica
CVE-2025-10230
samba: Command Injection in WINS Server Hook Script
En la Trivy database desde, como mínimo, el 24 oct 2026, 07:11 UTCNo consta cuándo entró antes de ese build.
Severidad por fuente
Red Hat10.0CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
La etiqueta propia de Trivy es CRITICAL. Crítica según Red Hat, Photon OS. Más baja según Ubuntu (media).
Descripción
A flaw was found in Samba, in the front-end WINS hook handling: NetBIOS names from registration packets are passed to a shell without proper validation or escaping. Unsanitized NetBIOS name data from WINS registration packets are inserted into a shell command and executed by the Samba Active Directory Domain Controller’s wins hook, allowing an unauthenticated network attacker to achieve remote command execution as the Samba process.
Paquetes afectados y versiones corregidas
| Fuente | Paquete | Corregido en |
|---|---|---|
| Photon OS 4.0 | libwbclient, libwbclient-devel, samba-client y 2 más | 4.19.3-2.ph4 |
| Photon OS 5.0 | libwbclient, libwbclient-devel, samba-client y 2 más | 4.19.3-4.ph5 |
| alpine 3.22 | samba | 4.21.9-r0 |
| alpine 3.23 | samba | 4.21.9-r0 |
| alpine 3.24 | samba | 4.21.9-r0 |
| alpine edge | samba | 4.21.9-r0 |
| debian 11 | samba | sin corrección indicada |
| debian 12 | samba | 2:4.17.12+dfsg-0+deb12u3 |
| debian 13 | samba | 2:4.22.6+dfsg-0+deb13u1 |
| debian 14 | samba | 2:4.23.2+dfsg-1 |
| echo | samba | 2:4.17.12+dfsg-0+deb12u3 |
| rapidfort debian 12 | samba | 0:4.22.6+dfsg-0+deb13u1, 2:4.17.12+dfsg-0+deb12u3, 2:4.23.2+dfsg-1 |
Mostrar las 82 entradas de 25 fuentes
| Fuente | Paquete | Corregido en |
|---|---|---|
| Photon OS 4.0 | libwbclient | 4.19.3-2.ph4 |
| Photon OS 4.0 | libwbclient-devel | 4.19.3-2.ph4 |
| Photon OS 4.0 | samba-client | 4.19.3-2.ph4 |
| Photon OS 4.0 | samba-client-devel | 4.19.3-2.ph4 |
| Photon OS 4.0 | samba-client-libs | 4.19.3-2.ph4 |
| Photon OS 5.0 | libwbclient | 4.19.3-4.ph5 |
| Photon OS 5.0 | libwbclient-devel | 4.19.3-4.ph5 |
| Photon OS 5.0 | samba-client | 4.19.3-4.ph5 |
| Photon OS 5.0 | samba-client-devel | 4.19.3-4.ph5 |
| Photon OS 5.0 | samba-client-libs | 4.19.3-4.ph5 |
| alpine 3.22 | samba | 4.21.9-r0 |
| alpine 3.23 | samba | 4.21.9-r0 |
| alpine 3.24 | samba | 4.21.9-r0 |
| alpine edge | samba | 4.21.9-r0 |
| debian 11 | samba | sin corrección indicada |
| debian 12 | samba | 2:4.17.12+dfsg-0+deb12u3 |
| debian 13 | samba | 2:4.22.6+dfsg-0+deb13u1 |
| debian 14 | samba | 2:4.23.2+dfsg-1 |
| echo | samba | 2:4.17.12+dfsg-0+deb12u3 |
| rapidfort debian 12 | samba | 0:4.22.6+dfsg-0+deb13u1, 2:4.17.12+dfsg-0+deb12u3, 2:4.23.2+dfsg-1 |
| rapidfort debian 13 | samba | 0:4.22.6+dfsg-0+deb13u1, 2:4.17.12+dfsg-0+deb12u3, 2:4.23.2+dfsg-1 |
| rapidfort fedora 43 | ctdb-ceph-mutex | 2:4.23.2-1.fc43 |
| rapidfort fedora 43 | ctdb-pcp-pmda | 2:4.23.2-1.fc43 |
| rapidfort fedora 43 | ldb-tools | 2:4.23.2-1.fc43 |
| rapidfort fedora 43 | libldb-devel | 2:4.23.2-1.fc43 |
| rapidfort fedora 43 | libnetapi | 2:4.23.2-1.fc43 |
| rapidfort fedora 43 | libnetapi-devel | 2:4.23.2-1.fc43 |
| rapidfort fedora 43 | libsmbclient | 2:4.23.2-1.fc43 |
| rapidfort fedora 43 | libsmbclient-devel | 2:4.23.2-1.fc43 |
| rapidfort fedora 43 | libwbclient | 2:4.23.2-1.fc43 |
| rapidfort fedora 43 | libwbclient-devel | 2:4.23.2-1.fc43 |
| rapidfort fedora 43 | python3-ldb | 2:4.23.2-1.fc43 |
| rapidfort fedora 43 | python3-samba | 2:4.23.2-1.fc43 |
| rapidfort fedora 43 | python3-samba-dc | 2:4.23.2-1.fc43 |
| rapidfort fedora 43 | python3-samba-test | 2:4.23.2-1.fc43 |
| rapidfort fedora 43 | rf-libwbclient | 2:4.23.2-1.fc43 |
| rapidfort fedora 43 | rf-samba | 2:4.23.2-1.fc43 |
| rapidfort fedora 43 | samba | 2:4.23.2-1.fc43 |
| rapidfort fedora 43 | samba-client | 2:4.23.2-1.fc43 |
| rapidfort fedora 43 | samba-client-libs | 2:4.23.2-1.fc43 |
| rapidfort fedora 43 | samba-common | 2:4.23.2-1.fc43 |
| rapidfort fedora 43 | samba-common-libs | 2:4.23.2-1.fc43 |
| rapidfort fedora 43 | samba-common-tools | 2:4.23.2-1.fc43 |
| rapidfort fedora 43 | samba-dc | 2:4.23.2-1.fc43 |
| rapidfort fedora 43 | samba-dc-bind-dlz | 2:4.23.2-1.fc43 |
| rapidfort fedora 43 | samba-dc-libs | 2:4.23.2-1.fc43 |
| rapidfort fedora 43 | samba-dc-provision | 2:4.23.2-1.fc43 |
| rapidfort fedora 43 | samba-dcerpc | 2:4.23.2-1.fc43 |
| rapidfort fedora 43 | samba-devel | 2:4.23.2-1.fc43 |
| rapidfort fedora 43 | samba-gpupdate | 2:4.23.2-1.fc43 |
| rapidfort fedora 43 | samba-krb5-printing | 2:4.23.2-1.fc43 |
| rapidfort fedora 43 | samba-ldb-ldap-modules | 2:4.23.2-1.fc43 |
| rapidfort fedora 43 | samba-libs | 2:4.23.2-1.fc43 |
| rapidfort fedora 43 | samba-pidl | 2:4.23.2-1.fc43 |
| rapidfort fedora 43 | samba-prometheus | 2:4.23.2-1.fc43 |
| rapidfort fedora 43 | samba-test | 2:4.23.2-1.fc43 |
| rapidfort fedora 43 | samba-test-libs | 2:4.23.2-1.fc43 |
| rapidfort fedora 43 | samba-tools | 2:4.23.2-1.fc43 |
| rapidfort fedora 43 | samba-usershares | 2:4.23.2-1.fc43 |
| rapidfort fedora 43 | samba-vfs-cephfs | 2:4.23.2-1.fc43 |
| rapidfort fedora 43 | samba-vfs-glusterfs | 2:4.23.2-1.fc43 |
| rapidfort fedora 43 | samba-vfs-iouring | 2:4.23.2-1.fc43 |
| rapidfort fedora 43 | samba-winbind | 2:4.23.2-1.fc43 |
| rapidfort fedora 43 | samba-winbind-clients | 2:4.23.2-1.fc43 |
| rapidfort fedora 43 | samba-winbind-krb5-locator | 2:4.23.2-1.fc43 |
| rapidfort fedora 43 | samba-winbind-modules | 2:4.23.2-1.fc43 |
| rapidfort fedora 43 | samba-winexe | 2:4.23.2-1.fc43 |
| rapidfort ubuntu 20.04 | rf-samba | 2:4.15.13+dfsg-0ubuntu1.10, 2:4.19.5+dfsg-4ubuntu9.4 |
| rapidfort ubuntu 20.04 | samba | 2:4.15.13+dfsg-0ubuntu1.10, 2:4.19.5+dfsg-4ubuntu9.4 |
| rapidfort ubuntu 22.04 | rf-samba | 2:4.15.13+dfsg-0ubuntu1.10, 2:4.19.5+dfsg-4ubuntu9.4 |
| rapidfort ubuntu 22.04 | samba | 2:4.15.13+dfsg-0ubuntu1.10, 2:4.19.5+dfsg-4ubuntu9.4 |
| rapidfort ubuntu 24.04 | rf-samba | 2:4.15.13+dfsg-0ubuntu1.10, 2:4.19.5+dfsg-4ubuntu9.4 |
| rapidfort ubuntu 24.04 | samba | 2:4.15.13+dfsg-0ubuntu1.10, 2:4.19.5+dfsg-4ubuntu9.4 |
| root.io debian 12 | rootio-samba | 2:4.17.12+dfsg-0+deb12u3 |
| root.io debian 12 | samba | 2:4.17.12+dfsg-0+deb12u3 |
| ubuntu 16.04-ESM | samba | 2:4.3.11+dfsg-0ubuntu0.16.04.34+esm4 |
| ubuntu 18.04-ESM | samba | 2:4.7.6+dfsg~ubuntu-0ubuntu2.29+esm3 |
| ubuntu 20.04-ESM | samba | 2:4.15.13+dfsg-0ubuntu0.20.04.8+esm1 |
| ubuntu 22.04 | samba | 2:4.15.13+dfsg-0ubuntu1.10 |
| ubuntu 24.04 | samba | 2:4.19.5+dfsg-4ubuntu9.4 |
| ubuntu 25.04 | samba | 2:4.21.4+dfsg-1ubuntu3.5 |
| ubuntu 25.10 | samba | 2:4.22.3+dfsg-4ubuntu2.1 |
Referencias
- https://access.redhat.com/security/cve/CVE-2025-10230
- https://bugzilla.redhat.com/show_bug.cgi?id=2394377
- https://nvd.nist.gov/vuln/detail/CVE-2025-10230
- https://ubuntu.com/security/notices/USN-7826-1
- https://ubuntu.com/security/notices/USN-7826-2
- https://www.cve.org/CVERecord?id=CVE-2025-10230
- https://www.samba.org/samba/history/security.html
- https://www.vicarius.io/vsociety/posts/cve-2025-10230-detect-samba-vulnerability