CVE-2025-10230: Samba: command injection in wins server hook script
A flaw was found in Samba, in the front-end WINS hook handling: NetBIOS names from registration packets are passed to a shell without proper validation or escaping. Unsanitized NetBIOS name data from WINS registration packets are inserted into a shell command and executed by the Samba Active Directory Domain Controller’s wins hook, allowing an unauthenticated network attacker to achieve remote command execution as the Samba process.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-10230?
CVE-2025-10230 is considered a high severity vulnerability due to the potential for remote code execution.
How do I fix CVE-2025-10230?
To fix CVE-2025-10230, update your Samba installation to the latest version where the vulnerability has been patched.
What is the impact of CVE-2025-10230?
The impact of CVE-2025-10230 includes the risk of attackers executing arbitrary commands on the affected system through unsanitized NetBIOS names.
Which versions of Samba are affected by CVE-2025-10230?
CVE-2025-10230 affects multiple versions of Samba where improper handling of WINS registration packets occurs.
How can I mitigate CVE-2025-10230 if I cannot update immediately?
To mitigate CVE-2025-10230, consider restricting access to Samba services or implementing network segmentation until a patch can be applied.