CVE-2025-10230

EUVD-2025-38301
A flaw was found in Samba, in the front-end WINS hook handling: NetBIOS names from registration packets are passed to a shell without proper validation or escaping. Unsanitized NetBIOS name data from WINS registration packets are inserted into a shell command and executed by the Samba Active Directory Domain Controller’s wins hook, allowing an unauthenticated network attacker to achieve remote command execution as the Samba process.
OS Command Injection
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
10 CRITICAL
NETWORK
LOW
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
redhatCNA
10 CRITICAL
NETWORK
LOW
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
Awaiting analysis
This vulnerability is currently awaiting analysis.
Base Score
CVSS 3.x
EPSS Score
Percentile: 58%
Debian logo
Debian Releases
Debian Product
Codename
samba
bookworm
2:4.17.12+dfsg-0+deb12u3
fixed
bookworm (security)
vulnerable
bullseye
ignored
bullseye (security)
vulnerable
forky
2:4.23.5+dfsg-1
fixed
sid
2:4.23.5+dfsg-1
fixed
trixie
2:4.22.6+dfsg-0+deb13u1
fixed
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
samba
bionic
Fixed 2:4.7.6+dfsg~ubuntu-0ubuntu2.29+esm3
released
focal
Fixed 2:4.15.13+dfsg-0ubuntu0.20.04.8+esm1
released
jammy
Fixed 2:4.15.13+dfsg-0ubuntu1.10
released
noble
Fixed 2:4.19.5+dfsg-4ubuntu9.4
released
plucky
Fixed 2:4.21.4+dfsg-1ubuntu3.5
released
questing
Fixed 2:4.22.3+dfsg-4ubuntu2.1
released
trusty
Fixed 2:4.3.11+dfsg-0ubuntu0.14.04.20+esm15
released
xenial
Fixed 2:4.3.11+dfsg-0ubuntu0.16.04.34+esm4
released
Common Weakness Enumeration
Vulnerability Media Exposure
References
https://access.redhat.com/security/cve/CVE-2025-10230
https://bugzilla.redhat.com/show_bug.cgi?id=2394377
https://www.samba.org/samba/history/security.html
https://www.vicarius.io/vsociety/posts/cve-2025-10230-detect-samba-vulnerability
https://www.vicarius.io/vsociety/posts/cve-2025-10230-mitigate-samba-vulnerability