CVE-2025-10230

A flaw was found in Samba, in the front-end WINS hook handling: NetBIOS names from registration packets are passed to a shell without proper validation or escaping. Unsanitized NetBIOS name data from WINS registration packets are inserted into a shell command and executed by the Samba Active Directory Domain Controllers wins hook, allowing an unauthenticated network attacker to achieve remote command execution as the Samba process.
OS Command Injection
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
10 CRITICAL
NETWORK
LOW
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
redhatCNA
10 CRITICAL
NETWORK
LOW
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
CISA-ADPADP
---
---
CVEADP
---
---
Awaiting analysis
This vulnerability is currently awaiting analysis.
Base Score
CVSS 3.x
EPSS Score
Percentile: 57%
Debian logo
Debian Releases
Debian Product
Codename
samba
bullseye
ignored
bookworm
no-dsa
bullseye (security)
vulnerable
bookworm (security)
vulnerable
trixie
2:4.22.6+dfsg-0+deb13u1
fixed
forky
2:4.23.3+dfsg-1
fixed
sid
2:4.23.4+dfsg-1
fixed
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
samba
questing
Fixed 2:4.22.3+dfsg-4ubuntu2.1
released
plucky
Fixed 2:4.21.4+dfsg-1ubuntu3.5
released
noble
Fixed 2:4.19.5+dfsg-4ubuntu9.4
released
jammy
Fixed 2:4.15.13+dfsg-0ubuntu1.10
released
focal
Fixed 2:4.15.13+dfsg-0ubuntu0.20.04.8+esm1
released
bionic
Fixed 2:4.7.6+dfsg~ubuntu-0ubuntu2.29+esm3
released
xenial
Fixed 2:4.3.11+dfsg-0ubuntu0.16.04.34+esm4
released
trusty
Fixed 2:4.3.11+dfsg-0ubuntu0.14.04.20+esm15
released
Common Weakness Enumeration
References
https://access.redhat.com/security/cve/CVE-2025-10230
https://bugzilla.redhat.com/show_bug.cgi?id=2394377
https://www.samba.org/samba/history/security.html
https://www.vicarius.io/vsociety/posts/cve-2025-10230-detect-samba-vulnerability
https://www.vicarius.io/vsociety/posts/cve-2025-10230-mitigate-samba-vulnerability