kritik
CVE-2025-10230
samba: Command Injection in WINS Server Hook Script
En geç 24 Eki 2026, 07:11 UTC tarihinden beri Trivy database'indeO derlemeden önce ne zaman girdiği kayıtlı değil.
Kaynağa göre önem derecesi
Red Hat10.0CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
Trivy'nin kendi etiketi CRITICAL. Kritik diyenler: Red Hat, Photon OS. Daha düşük diyenler: Ubuntu (orta).
Açıklama
A flaw was found in Samba, in the front-end WINS hook handling: NetBIOS names from registration packets are passed to a shell without proper validation or escaping. Unsanitized NetBIOS name data from WINS registration packets are inserted into a shell command and executed by the Samba Active Directory Domain Controller’s wins hook, allowing an unauthenticated network attacker to achieve remote command execution as the Samba process.
Etkilenen paketler ve düzeltilmiş sürümler
| Kaynak | Paket | Düzeltildiği sürüm |
|---|---|---|
| Photon OS 4.0 | libwbclient, libwbclient-devel, samba-client ve 2 tane daha | 4.19.3-2.ph4 |
| Photon OS 5.0 | libwbclient, libwbclient-devel, samba-client ve 2 tane daha | 4.19.3-4.ph5 |
| alpine 3.22 | samba | 4.21.9-r0 |
| alpine 3.23 | samba | 4.21.9-r0 |
| alpine 3.24 | samba | 4.21.9-r0 |
| alpine edge | samba | 4.21.9-r0 |
| debian 11 | samba | düzeltme belirtilmemiş |
| debian 12 | samba | 2:4.17.12+dfsg-0+deb12u3 |
| debian 13 | samba | 2:4.22.6+dfsg-0+deb13u1 |
| debian 14 | samba | 2:4.23.2+dfsg-1 |
| echo | samba | 2:4.17.12+dfsg-0+deb12u3 |
| rapidfort debian 12 | samba | 0:4.22.6+dfsg-0+deb13u1, 2:4.17.12+dfsg-0+deb12u3, 2:4.23.2+dfsg-1 |
25 kaynaktaki 82 kaydın hepsini göster
| Kaynak | Paket | Düzeltildiği sürüm |
|---|---|---|
| Photon OS 4.0 | libwbclient | 4.19.3-2.ph4 |
| Photon OS 4.0 | libwbclient-devel | 4.19.3-2.ph4 |
| Photon OS 4.0 | samba-client | 4.19.3-2.ph4 |
| Photon OS 4.0 | samba-client-devel | 4.19.3-2.ph4 |
| Photon OS 4.0 | samba-client-libs | 4.19.3-2.ph4 |
| Photon OS 5.0 | libwbclient | 4.19.3-4.ph5 |
| Photon OS 5.0 | libwbclient-devel | 4.19.3-4.ph5 |
| Photon OS 5.0 | samba-client | 4.19.3-4.ph5 |
| Photon OS 5.0 | samba-client-devel | 4.19.3-4.ph5 |
| Photon OS 5.0 | samba-client-libs | 4.19.3-4.ph5 |
| alpine 3.22 | samba | 4.21.9-r0 |
| alpine 3.23 | samba | 4.21.9-r0 |
| alpine 3.24 | samba | 4.21.9-r0 |
| alpine edge | samba | 4.21.9-r0 |
| debian 11 | samba | düzeltme belirtilmemiş |
| debian 12 | samba | 2:4.17.12+dfsg-0+deb12u3 |
| debian 13 | samba | 2:4.22.6+dfsg-0+deb13u1 |
| debian 14 | samba | 2:4.23.2+dfsg-1 |
| echo | samba | 2:4.17.12+dfsg-0+deb12u3 |
| rapidfort debian 12 | samba | 0:4.22.6+dfsg-0+deb13u1, 2:4.17.12+dfsg-0+deb12u3, 2:4.23.2+dfsg-1 |
| rapidfort debian 13 | samba | 0:4.22.6+dfsg-0+deb13u1, 2:4.17.12+dfsg-0+deb12u3, 2:4.23.2+dfsg-1 |
| rapidfort fedora 43 | ctdb-ceph-mutex | 2:4.23.2-1.fc43 |
| rapidfort fedora 43 | ctdb-pcp-pmda | 2:4.23.2-1.fc43 |
| rapidfort fedora 43 | ldb-tools | 2:4.23.2-1.fc43 |
| rapidfort fedora 43 | libldb-devel | 2:4.23.2-1.fc43 |
| rapidfort fedora 43 | libnetapi | 2:4.23.2-1.fc43 |
| rapidfort fedora 43 | libnetapi-devel | 2:4.23.2-1.fc43 |
| rapidfort fedora 43 | libsmbclient | 2:4.23.2-1.fc43 |
| rapidfort fedora 43 | libsmbclient-devel | 2:4.23.2-1.fc43 |
| rapidfort fedora 43 | libwbclient | 2:4.23.2-1.fc43 |
| rapidfort fedora 43 | libwbclient-devel | 2:4.23.2-1.fc43 |
| rapidfort fedora 43 | python3-ldb | 2:4.23.2-1.fc43 |
| rapidfort fedora 43 | python3-samba | 2:4.23.2-1.fc43 |
| rapidfort fedora 43 | python3-samba-dc | 2:4.23.2-1.fc43 |
| rapidfort fedora 43 | python3-samba-test | 2:4.23.2-1.fc43 |
| rapidfort fedora 43 | rf-libwbclient | 2:4.23.2-1.fc43 |
| rapidfort fedora 43 | rf-samba | 2:4.23.2-1.fc43 |
| rapidfort fedora 43 | samba | 2:4.23.2-1.fc43 |
| rapidfort fedora 43 | samba-client | 2:4.23.2-1.fc43 |
| rapidfort fedora 43 | samba-client-libs | 2:4.23.2-1.fc43 |
| rapidfort fedora 43 | samba-common | 2:4.23.2-1.fc43 |
| rapidfort fedora 43 | samba-common-libs | 2:4.23.2-1.fc43 |
| rapidfort fedora 43 | samba-common-tools | 2:4.23.2-1.fc43 |
| rapidfort fedora 43 | samba-dc | 2:4.23.2-1.fc43 |
| rapidfort fedora 43 | samba-dc-bind-dlz | 2:4.23.2-1.fc43 |
| rapidfort fedora 43 | samba-dc-libs | 2:4.23.2-1.fc43 |
| rapidfort fedora 43 | samba-dc-provision | 2:4.23.2-1.fc43 |
| rapidfort fedora 43 | samba-dcerpc | 2:4.23.2-1.fc43 |
| rapidfort fedora 43 | samba-devel | 2:4.23.2-1.fc43 |
| rapidfort fedora 43 | samba-gpupdate | 2:4.23.2-1.fc43 |
| rapidfort fedora 43 | samba-krb5-printing | 2:4.23.2-1.fc43 |
| rapidfort fedora 43 | samba-ldb-ldap-modules | 2:4.23.2-1.fc43 |
| rapidfort fedora 43 | samba-libs | 2:4.23.2-1.fc43 |
| rapidfort fedora 43 | samba-pidl | 2:4.23.2-1.fc43 |
| rapidfort fedora 43 | samba-prometheus | 2:4.23.2-1.fc43 |
| rapidfort fedora 43 | samba-test | 2:4.23.2-1.fc43 |
| rapidfort fedora 43 | samba-test-libs | 2:4.23.2-1.fc43 |
| rapidfort fedora 43 | samba-tools | 2:4.23.2-1.fc43 |
| rapidfort fedora 43 | samba-usershares | 2:4.23.2-1.fc43 |
| rapidfort fedora 43 | samba-vfs-cephfs | 2:4.23.2-1.fc43 |
| rapidfort fedora 43 | samba-vfs-glusterfs | 2:4.23.2-1.fc43 |
| rapidfort fedora 43 | samba-vfs-iouring | 2:4.23.2-1.fc43 |
| rapidfort fedora 43 | samba-winbind | 2:4.23.2-1.fc43 |
| rapidfort fedora 43 | samba-winbind-clients | 2:4.23.2-1.fc43 |
| rapidfort fedora 43 | samba-winbind-krb5-locator | 2:4.23.2-1.fc43 |
| rapidfort fedora 43 | samba-winbind-modules | 2:4.23.2-1.fc43 |
| rapidfort fedora 43 | samba-winexe | 2:4.23.2-1.fc43 |
| rapidfort ubuntu 20.04 | rf-samba | 2:4.15.13+dfsg-0ubuntu1.10, 2:4.19.5+dfsg-4ubuntu9.4 |
| rapidfort ubuntu 20.04 | samba | 2:4.15.13+dfsg-0ubuntu1.10, 2:4.19.5+dfsg-4ubuntu9.4 |
| rapidfort ubuntu 22.04 | rf-samba | 2:4.15.13+dfsg-0ubuntu1.10, 2:4.19.5+dfsg-4ubuntu9.4 |
| rapidfort ubuntu 22.04 | samba | 2:4.15.13+dfsg-0ubuntu1.10, 2:4.19.5+dfsg-4ubuntu9.4 |
| rapidfort ubuntu 24.04 | rf-samba | 2:4.15.13+dfsg-0ubuntu1.10, 2:4.19.5+dfsg-4ubuntu9.4 |
| rapidfort ubuntu 24.04 | samba | 2:4.15.13+dfsg-0ubuntu1.10, 2:4.19.5+dfsg-4ubuntu9.4 |
| root.io debian 12 | rootio-samba | 2:4.17.12+dfsg-0+deb12u3 |
| root.io debian 12 | samba | 2:4.17.12+dfsg-0+deb12u3 |
| ubuntu 16.04-ESM | samba | 2:4.3.11+dfsg-0ubuntu0.16.04.34+esm4 |
| ubuntu 18.04-ESM | samba | 2:4.7.6+dfsg~ubuntu-0ubuntu2.29+esm3 |
| ubuntu 20.04-ESM | samba | 2:4.15.13+dfsg-0ubuntu0.20.04.8+esm1 |
| ubuntu 22.04 | samba | 2:4.15.13+dfsg-0ubuntu1.10 |
| ubuntu 24.04 | samba | 2:4.19.5+dfsg-4ubuntu9.4 |
| ubuntu 25.04 | samba | 2:4.21.4+dfsg-1ubuntu3.5 |
| ubuntu 25.10 | samba | 2:4.22.3+dfsg-4ubuntu2.1 |
Referanslar
- https://access.redhat.com/security/cve/CVE-2025-10230
- https://bugzilla.redhat.com/show_bug.cgi?id=2394377
- https://nvd.nist.gov/vuln/detail/CVE-2025-10230
- https://ubuntu.com/security/notices/USN-7826-1
- https://ubuntu.com/security/notices/USN-7826-2
- https://www.cve.org/CVERecord?id=CVE-2025-10230
- https://www.samba.org/samba/history/security.html
- https://www.vicarius.io/vsociety/posts/cve-2025-10230-detect-samba-vulnerability