Attestkeep
Language: English
Sign up

Vulnerabilities / CVE-2025-10230

critical

CVE-2025-10230

samba: Command Injection in WINS Server Hook Script

Published Modified CWE 78
In the Trivy database since at least 24 Oct 2026, 07:11 UTCWhen it arrived before that build is not recorded.

Severity by source

Red Hat10.0CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

Trivy's own label is CRITICAL. Rated critical by Red Hat, Photon OS. Rated lower by Ubuntu (medium).

Description

A flaw was found in Samba, in the front-end WINS hook handling: NetBIOS names from registration packets are passed to a shell without proper validation or escaping. Unsanitized NetBIOS name data from WINS registration packets are inserted into a shell command and executed by the Samba Active Directory Domain Controller’s wins hook, allowing an unauthenticated network attacker to achieve remote command execution as the Samba process.

Affected packages and fixed versions

SourcePackageFixed in
Photon OS 4.0libwbclient, libwbclient-devel, samba-client and 2 more4.19.3-2.ph4
Photon OS 5.0libwbclient, libwbclient-devel, samba-client and 2 more4.19.3-4.ph5
alpine 3.22samba4.21.9-r0
alpine 3.23samba4.21.9-r0
alpine 3.24samba4.21.9-r0
alpine edgesamba4.21.9-r0
debian 11sambano fix listed
debian 12samba2:4.17.12+dfsg-0+deb12u3
debian 13samba2:4.22.6+dfsg-0+deb13u1
debian 14samba2:4.23.2+dfsg-1
echosamba2:4.17.12+dfsg-0+deb12u3
rapidfort debian 12samba0:4.22.6+dfsg-0+deb13u1, 2:4.17.12+dfsg-0+deb12u3, 2:4.23.2+dfsg-1
Show all 82 entries from 25 sources
SourcePackageFixed in
Photon OS 4.0libwbclient4.19.3-2.ph4
Photon OS 4.0libwbclient-devel4.19.3-2.ph4
Photon OS 4.0samba-client4.19.3-2.ph4
Photon OS 4.0samba-client-devel4.19.3-2.ph4
Photon OS 4.0samba-client-libs4.19.3-2.ph4
Photon OS 5.0libwbclient4.19.3-4.ph5
Photon OS 5.0libwbclient-devel4.19.3-4.ph5
Photon OS 5.0samba-client4.19.3-4.ph5
Photon OS 5.0samba-client-devel4.19.3-4.ph5
Photon OS 5.0samba-client-libs4.19.3-4.ph5
alpine 3.22samba4.21.9-r0
alpine 3.23samba4.21.9-r0
alpine 3.24samba4.21.9-r0
alpine edgesamba4.21.9-r0
debian 11sambano fix listed
debian 12samba2:4.17.12+dfsg-0+deb12u3
debian 13samba2:4.22.6+dfsg-0+deb13u1
debian 14samba2:4.23.2+dfsg-1
echosamba2:4.17.12+dfsg-0+deb12u3
rapidfort debian 12samba0:4.22.6+dfsg-0+deb13u1, 2:4.17.12+dfsg-0+deb12u3, 2:4.23.2+dfsg-1
rapidfort debian 13samba0:4.22.6+dfsg-0+deb13u1, 2:4.17.12+dfsg-0+deb12u3, 2:4.23.2+dfsg-1
rapidfort fedora 43ctdb-ceph-mutex2:4.23.2-1.fc43
rapidfort fedora 43ctdb-pcp-pmda2:4.23.2-1.fc43
rapidfort fedora 43ldb-tools2:4.23.2-1.fc43
rapidfort fedora 43libldb-devel2:4.23.2-1.fc43
rapidfort fedora 43libnetapi2:4.23.2-1.fc43
rapidfort fedora 43libnetapi-devel2:4.23.2-1.fc43
rapidfort fedora 43libsmbclient2:4.23.2-1.fc43
rapidfort fedora 43libsmbclient-devel2:4.23.2-1.fc43
rapidfort fedora 43libwbclient2:4.23.2-1.fc43
rapidfort fedora 43libwbclient-devel2:4.23.2-1.fc43
rapidfort fedora 43python3-ldb2:4.23.2-1.fc43
rapidfort fedora 43python3-samba2:4.23.2-1.fc43
rapidfort fedora 43python3-samba-dc2:4.23.2-1.fc43
rapidfort fedora 43python3-samba-test2:4.23.2-1.fc43
rapidfort fedora 43rf-libwbclient2:4.23.2-1.fc43
rapidfort fedora 43rf-samba2:4.23.2-1.fc43
rapidfort fedora 43samba2:4.23.2-1.fc43
rapidfort fedora 43samba-client2:4.23.2-1.fc43
rapidfort fedora 43samba-client-libs2:4.23.2-1.fc43
rapidfort fedora 43samba-common2:4.23.2-1.fc43
rapidfort fedora 43samba-common-libs2:4.23.2-1.fc43
rapidfort fedora 43samba-common-tools2:4.23.2-1.fc43
rapidfort fedora 43samba-dc2:4.23.2-1.fc43
rapidfort fedora 43samba-dc-bind-dlz2:4.23.2-1.fc43
rapidfort fedora 43samba-dc-libs2:4.23.2-1.fc43
rapidfort fedora 43samba-dc-provision2:4.23.2-1.fc43
rapidfort fedora 43samba-dcerpc2:4.23.2-1.fc43
rapidfort fedora 43samba-devel2:4.23.2-1.fc43
rapidfort fedora 43samba-gpupdate2:4.23.2-1.fc43
rapidfort fedora 43samba-krb5-printing2:4.23.2-1.fc43
rapidfort fedora 43samba-ldb-ldap-modules2:4.23.2-1.fc43
rapidfort fedora 43samba-libs2:4.23.2-1.fc43
rapidfort fedora 43samba-pidl2:4.23.2-1.fc43
rapidfort fedora 43samba-prometheus2:4.23.2-1.fc43
rapidfort fedora 43samba-test2:4.23.2-1.fc43
rapidfort fedora 43samba-test-libs2:4.23.2-1.fc43
rapidfort fedora 43samba-tools2:4.23.2-1.fc43
rapidfort fedora 43samba-usershares2:4.23.2-1.fc43
rapidfort fedora 43samba-vfs-cephfs2:4.23.2-1.fc43
rapidfort fedora 43samba-vfs-glusterfs2:4.23.2-1.fc43
rapidfort fedora 43samba-vfs-iouring2:4.23.2-1.fc43
rapidfort fedora 43samba-winbind2:4.23.2-1.fc43
rapidfort fedora 43samba-winbind-clients2:4.23.2-1.fc43
rapidfort fedora 43samba-winbind-krb5-locator2:4.23.2-1.fc43
rapidfort fedora 43samba-winbind-modules2:4.23.2-1.fc43
rapidfort fedora 43samba-winexe2:4.23.2-1.fc43
rapidfort ubuntu 20.04rf-samba2:4.15.13+dfsg-0ubuntu1.10, 2:4.19.5+dfsg-4ubuntu9.4
rapidfort ubuntu 20.04samba2:4.15.13+dfsg-0ubuntu1.10, 2:4.19.5+dfsg-4ubuntu9.4
rapidfort ubuntu 22.04rf-samba2:4.15.13+dfsg-0ubuntu1.10, 2:4.19.5+dfsg-4ubuntu9.4
rapidfort ubuntu 22.04samba2:4.15.13+dfsg-0ubuntu1.10, 2:4.19.5+dfsg-4ubuntu9.4
rapidfort ubuntu 24.04rf-samba2:4.15.13+dfsg-0ubuntu1.10, 2:4.19.5+dfsg-4ubuntu9.4
rapidfort ubuntu 24.04samba2:4.15.13+dfsg-0ubuntu1.10, 2:4.19.5+dfsg-4ubuntu9.4
root.io debian 12rootio-samba2:4.17.12+dfsg-0+deb12u3
root.io debian 12samba2:4.17.12+dfsg-0+deb12u3
ubuntu 16.04-ESMsamba2:4.3.11+dfsg-0ubuntu0.16.04.34+esm4
ubuntu 18.04-ESMsamba2:4.7.6+dfsg~ubuntu-0ubuntu2.29+esm3
ubuntu 20.04-ESMsamba2:4.15.13+dfsg-0ubuntu0.20.04.8+esm1
ubuntu 22.04samba2:4.15.13+dfsg-0ubuntu1.10
ubuntu 24.04samba2:4.19.5+dfsg-4ubuntu9.4
ubuntu 25.04samba2:4.21.4+dfsg-1ubuntu3.5
ubuntu 25.10samba2:4.22.3+dfsg-4ubuntu2.1

References

All 9 references

Vulnerability data compiled from the Trivy vulnerability database (trivy-db, Aqua Security, Apache License 2.0), which aggregates third-party advisories. CVE records are published by The MITRE Corporation under the CVE Terms of Use; CVE is a trademark of MITRE. This product uses data from the NVD API but is not endorsed or certified by the NVD. Severity, titles and advisory data from the GitHub Advisory Database (CC BY 4.0), Red Hat security data (CC BY 4.0) and the other sources linked on each entry. Entries may be summarised or re-formatted; the linked original is the authoritative record.