CVE-2025-10230

This vulnerability is marked as RESERVED by NVD. This means that the CVE-ID is reserved for future use by the CVE Numbering Authority (CNA) or a security researcher, but the details of it are not yet publicly available yet.

This page will reflect the classification results once they are available through NVD.

Any vendor information available is shown as below.

Redhat

samba: Command Injection in WINS Server Hook Script

Mitigation

The mitigation is to disable the vulnerable configuration by removing or leaving the wins hook parameter empty in smb.conf and ensuring that wins support is set to no on all Domain Controllers. Since the issue only affects Samba when both WINS support and the hook are enabled, disabling these options prevents exploitation. Administrators should also restrict external access to UDP port 137 to trusted networks.

Ubuntu

Command injection via WINS server hook script

Affected Software List