Vulnerability · Published Nov 7, 2025 · Assigned by redhat
CVE-2025-10230Samba: command injection in wins server hook script
Critical 10.0
In plain English
A critical-severity OS command injection in samba. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 39.8% (higher than 99% of all known vulnerabilities). Ready-made attack tooling exists: public proof-of-concept code. Fixed versions are available - upgrade the affected package.
Official description
A flaw was found in Samba, in the front-end WINS hook handling: NetBIOS names from registration packets are passed to a shell without proper validation or escaping. Unsanitized NetBIOS name data from WINS registration packets are inserted into a shell command and executed by the Samba Active Directory Domain Controller’s wins hook, allowing an unauthenticated network attacker to achieve remote command execution as the Samba process.
Affected packages & fixed versions
| Ecosystem | Package | Fixed in | Advisory |
|---|---|---|---|
| Alpine:v3.22 | samba | 4.21.9-r0 | ALPINE-CVE-2025-10230 |
| Alpine:v3.23 | samba | 4.21.9-r0 | ALPINE-CVE-2025-10230 |
| Alpine:v3.24 | samba | 4.21.9-r0 | ALPINE-CVE-2025-10230 |
| Debian:12 | samba | 2:4.17.12+dfsg-0+deb12u3 | DEBIAN-CVE-2025-10230 |
| Debian:13 | samba | 2:4.22.6+dfsg-0+deb13u1 | DEBIAN-CVE-2025-10230 |
| Debian:14 | samba | 2:4.23.2+dfsg-1 | DEBIAN-CVE-2025-10230 |
| Ubuntu:22.04:LTS | samba | 2:4.15.13+dfsg-0ubuntu1.10 | USN-7826-1 |
| Ubuntu:22.04:LTS | samba | 2:4.15.13+dfsg-0ubuntu1.10 | UBUNTU-CVE-2025-10230 |
| Ubuntu:24.04:LTS | samba | 2:4.19.5+dfsg-4ubuntu9.4 | USN-7826-1 |
| Ubuntu:24.04:LTS | samba | 2:4.19.5+dfsg-4ubuntu9.4 | UBUNTU-CVE-2025-10230 |
| Ubuntu:25.10 | samba | 2:4.22.3+dfsg-4ubuntu2.1 | UBUNTU-CVE-2025-10230 |
| Ubuntu:25.10 | samba | 2:4.22.3+dfsg-4ubuntu2.1 | USN-7826-1 |
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| samba | 0 – before 4.21.94.22.0 – before 4.21.54.23.0 – before 4.23.2 | |
| Red Hat | Red Hat Enterprise Linux 10 | see references |
| Red Hat | Red Hat Enterprise Linux 6 | see references |
| Red Hat | Red Hat Enterprise Linux 6 | see references |
| Red Hat | Red Hat Enterprise Linux 7 | see references |
| Red Hat | Red Hat Enterprise Linux 8 | see references |
| Red Hat | Red Hat Enterprise Linux 9 | see references |
| Red Hat | Red Hat OpenShift Container Platform 4 | see references |
| Red Hat | Red Hat OpenShift Container Platform 4 | see references |
Weakness: CWE-78 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
References
- https://access.redhat.com/security/cve/CVE-2025-10230 vdb-entry, x_refsource_REDHAT
- RHBZ#2394377 issue-tracking, x_refsource_REDHAT
- https://www.samba.org/samba/history/security.html
- https://www.vicarius.io/vsociety/posts/cve-2025-10230-detect-samba-vulnerability
- https://www.vicarius.io/vsociety/posts/cve-2025-10230-mitigate-samba-vulnerability