critique
CVE-2025-10230
samba: Command Injection in WINS Server Hook Script
Dans la Trivy database depuis au moins le 24 oct. 2026, 07:11 UTCLa date d'entrée avant ce build n'est pas enregistrée.
Sévérité par source
Red Hat10.0CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
Le label propre à Trivy est CRITICAL. Critique selon Red Hat, Photon OS. Plus basse selon Ubuntu (moyenne).
Description
A flaw was found in Samba, in the front-end WINS hook handling: NetBIOS names from registration packets are passed to a shell without proper validation or escaping. Unsanitized NetBIOS name data from WINS registration packets are inserted into a shell command and executed by the Samba Active Directory Domain Controller’s wins hook, allowing an unauthenticated network attacker to achieve remote command execution as the Samba process.
Paquets affectés et versions corrigées
| Source | Paquet | Corrigé en |
|---|---|---|
| Photon OS 4.0 | libwbclient, libwbclient-devel, samba-client et 2 autres | 4.19.3-2.ph4 |
| Photon OS 5.0 | libwbclient, libwbclient-devel, samba-client et 2 autres | 4.19.3-4.ph5 |
| alpine 3.22 | samba | 4.21.9-r0 |
| alpine 3.23 | samba | 4.21.9-r0 |
| alpine 3.24 | samba | 4.21.9-r0 |
| alpine edge | samba | 4.21.9-r0 |
| debian 11 | samba | pas de correctif indiqué |
| debian 12 | samba | 2:4.17.12+dfsg-0+deb12u3 |
| debian 13 | samba | 2:4.22.6+dfsg-0+deb13u1 |
| debian 14 | samba | 2:4.23.2+dfsg-1 |
| echo | samba | 2:4.17.12+dfsg-0+deb12u3 |
| rapidfort debian 12 | samba | 0:4.22.6+dfsg-0+deb13u1, 2:4.17.12+dfsg-0+deb12u3, 2:4.23.2+dfsg-1 |
Afficher les 82 entrées de 25 sources
| Source | Paquet | Corrigé en |
|---|---|---|
| Photon OS 4.0 | libwbclient | 4.19.3-2.ph4 |
| Photon OS 4.0 | libwbclient-devel | 4.19.3-2.ph4 |
| Photon OS 4.0 | samba-client | 4.19.3-2.ph4 |
| Photon OS 4.0 | samba-client-devel | 4.19.3-2.ph4 |
| Photon OS 4.0 | samba-client-libs | 4.19.3-2.ph4 |
| Photon OS 5.0 | libwbclient | 4.19.3-4.ph5 |
| Photon OS 5.0 | libwbclient-devel | 4.19.3-4.ph5 |
| Photon OS 5.0 | samba-client | 4.19.3-4.ph5 |
| Photon OS 5.0 | samba-client-devel | 4.19.3-4.ph5 |
| Photon OS 5.0 | samba-client-libs | 4.19.3-4.ph5 |
| alpine 3.22 | samba | 4.21.9-r0 |
| alpine 3.23 | samba | 4.21.9-r0 |
| alpine 3.24 | samba | 4.21.9-r0 |
| alpine edge | samba | 4.21.9-r0 |
| debian 11 | samba | pas de correctif indiqué |
| debian 12 | samba | 2:4.17.12+dfsg-0+deb12u3 |
| debian 13 | samba | 2:4.22.6+dfsg-0+deb13u1 |
| debian 14 | samba | 2:4.23.2+dfsg-1 |
| echo | samba | 2:4.17.12+dfsg-0+deb12u3 |
| rapidfort debian 12 | samba | 0:4.22.6+dfsg-0+deb13u1, 2:4.17.12+dfsg-0+deb12u3, 2:4.23.2+dfsg-1 |
| rapidfort debian 13 | samba | 0:4.22.6+dfsg-0+deb13u1, 2:4.17.12+dfsg-0+deb12u3, 2:4.23.2+dfsg-1 |
| rapidfort fedora 43 | ctdb-ceph-mutex | 2:4.23.2-1.fc43 |
| rapidfort fedora 43 | ctdb-pcp-pmda | 2:4.23.2-1.fc43 |
| rapidfort fedora 43 | ldb-tools | 2:4.23.2-1.fc43 |
| rapidfort fedora 43 | libldb-devel | 2:4.23.2-1.fc43 |
| rapidfort fedora 43 | libnetapi | 2:4.23.2-1.fc43 |
| rapidfort fedora 43 | libnetapi-devel | 2:4.23.2-1.fc43 |
| rapidfort fedora 43 | libsmbclient | 2:4.23.2-1.fc43 |
| rapidfort fedora 43 | libsmbclient-devel | 2:4.23.2-1.fc43 |
| rapidfort fedora 43 | libwbclient | 2:4.23.2-1.fc43 |
| rapidfort fedora 43 | libwbclient-devel | 2:4.23.2-1.fc43 |
| rapidfort fedora 43 | python3-ldb | 2:4.23.2-1.fc43 |
| rapidfort fedora 43 | python3-samba | 2:4.23.2-1.fc43 |
| rapidfort fedora 43 | python3-samba-dc | 2:4.23.2-1.fc43 |
| rapidfort fedora 43 | python3-samba-test | 2:4.23.2-1.fc43 |
| rapidfort fedora 43 | rf-libwbclient | 2:4.23.2-1.fc43 |
| rapidfort fedora 43 | rf-samba | 2:4.23.2-1.fc43 |
| rapidfort fedora 43 | samba | 2:4.23.2-1.fc43 |
| rapidfort fedora 43 | samba-client | 2:4.23.2-1.fc43 |
| rapidfort fedora 43 | samba-client-libs | 2:4.23.2-1.fc43 |
| rapidfort fedora 43 | samba-common | 2:4.23.2-1.fc43 |
| rapidfort fedora 43 | samba-common-libs | 2:4.23.2-1.fc43 |
| rapidfort fedora 43 | samba-common-tools | 2:4.23.2-1.fc43 |
| rapidfort fedora 43 | samba-dc | 2:4.23.2-1.fc43 |
| rapidfort fedora 43 | samba-dc-bind-dlz | 2:4.23.2-1.fc43 |
| rapidfort fedora 43 | samba-dc-libs | 2:4.23.2-1.fc43 |
| rapidfort fedora 43 | samba-dc-provision | 2:4.23.2-1.fc43 |
| rapidfort fedora 43 | samba-dcerpc | 2:4.23.2-1.fc43 |
| rapidfort fedora 43 | samba-devel | 2:4.23.2-1.fc43 |
| rapidfort fedora 43 | samba-gpupdate | 2:4.23.2-1.fc43 |
| rapidfort fedora 43 | samba-krb5-printing | 2:4.23.2-1.fc43 |
| rapidfort fedora 43 | samba-ldb-ldap-modules | 2:4.23.2-1.fc43 |
| rapidfort fedora 43 | samba-libs | 2:4.23.2-1.fc43 |
| rapidfort fedora 43 | samba-pidl | 2:4.23.2-1.fc43 |
| rapidfort fedora 43 | samba-prometheus | 2:4.23.2-1.fc43 |
| rapidfort fedora 43 | samba-test | 2:4.23.2-1.fc43 |
| rapidfort fedora 43 | samba-test-libs | 2:4.23.2-1.fc43 |
| rapidfort fedora 43 | samba-tools | 2:4.23.2-1.fc43 |
| rapidfort fedora 43 | samba-usershares | 2:4.23.2-1.fc43 |
| rapidfort fedora 43 | samba-vfs-cephfs | 2:4.23.2-1.fc43 |
| rapidfort fedora 43 | samba-vfs-glusterfs | 2:4.23.2-1.fc43 |
| rapidfort fedora 43 | samba-vfs-iouring | 2:4.23.2-1.fc43 |
| rapidfort fedora 43 | samba-winbind | 2:4.23.2-1.fc43 |
| rapidfort fedora 43 | samba-winbind-clients | 2:4.23.2-1.fc43 |
| rapidfort fedora 43 | samba-winbind-krb5-locator | 2:4.23.2-1.fc43 |
| rapidfort fedora 43 | samba-winbind-modules | 2:4.23.2-1.fc43 |
| rapidfort fedora 43 | samba-winexe | 2:4.23.2-1.fc43 |
| rapidfort ubuntu 20.04 | rf-samba | 2:4.15.13+dfsg-0ubuntu1.10, 2:4.19.5+dfsg-4ubuntu9.4 |
| rapidfort ubuntu 20.04 | samba | 2:4.15.13+dfsg-0ubuntu1.10, 2:4.19.5+dfsg-4ubuntu9.4 |
| rapidfort ubuntu 22.04 | rf-samba | 2:4.15.13+dfsg-0ubuntu1.10, 2:4.19.5+dfsg-4ubuntu9.4 |
| rapidfort ubuntu 22.04 | samba | 2:4.15.13+dfsg-0ubuntu1.10, 2:4.19.5+dfsg-4ubuntu9.4 |
| rapidfort ubuntu 24.04 | rf-samba | 2:4.15.13+dfsg-0ubuntu1.10, 2:4.19.5+dfsg-4ubuntu9.4 |
| rapidfort ubuntu 24.04 | samba | 2:4.15.13+dfsg-0ubuntu1.10, 2:4.19.5+dfsg-4ubuntu9.4 |
| root.io debian 12 | rootio-samba | 2:4.17.12+dfsg-0+deb12u3 |
| root.io debian 12 | samba | 2:4.17.12+dfsg-0+deb12u3 |
| ubuntu 16.04-ESM | samba | 2:4.3.11+dfsg-0ubuntu0.16.04.34+esm4 |
| ubuntu 18.04-ESM | samba | 2:4.7.6+dfsg~ubuntu-0ubuntu2.29+esm3 |
| ubuntu 20.04-ESM | samba | 2:4.15.13+dfsg-0ubuntu0.20.04.8+esm1 |
| ubuntu 22.04 | samba | 2:4.15.13+dfsg-0ubuntu1.10 |
| ubuntu 24.04 | samba | 2:4.19.5+dfsg-4ubuntu9.4 |
| ubuntu 25.04 | samba | 2:4.21.4+dfsg-1ubuntu3.5 |
| ubuntu 25.10 | samba | 2:4.22.3+dfsg-4ubuntu2.1 |
Références
- https://access.redhat.com/security/cve/CVE-2025-10230
- https://bugzilla.redhat.com/show_bug.cgi?id=2394377
- https://nvd.nist.gov/vuln/detail/CVE-2025-10230
- https://ubuntu.com/security/notices/USN-7826-1
- https://ubuntu.com/security/notices/USN-7826-2
- https://www.cve.org/CVERecord?id=CVE-2025-10230
- https://www.samba.org/samba/history/security.html
- https://www.vicarius.io/vsociety/posts/cve-2025-10230-detect-samba-vulnerability