Количество 14
Количество 14
GHSA-88qg-f543-x242
A flaw was found in Samba, in the front-end WINS hook handling: NetBIOS names from registration packets are passed to a shell without proper validation or escaping. Unsanitized NetBIOS name data from WINS registration packets are inserted into a shell command and executed by the Samba Active Directory Domain Controller’s wins hook, allowing an unauthenticated network attacker to achieve remote command execution as the Samba process.
CVE-2025-10230
A flaw was found in Samba, in the front-end WINS hook handling: NetBIOS names from registration packets are passed to a shell without proper validation or escaping. Unsanitized NetBIOS name data from WINS registration packets are inserted into a shell command and executed by the Samba Active Directory Domain Controller’s wins hook, allowing an unauthenticated network attacker to achieve remote command execution as the Samba process.
CVE-2025-10230
A flaw was found in Samba, in the front-end WINS hook handling: NetBIOS names from registration packets are passed to a shell without proper validation or escaping. Unsanitized NetBIOS name data from WINS registration packets are inserted into a shell command and executed by the Samba Active Directory Domain Controller’s wins hook, allowing an unauthenticated network attacker to achieve remote command execution as the Samba process.
CVE-2025-10230
A flaw was found in Samba, in the front-end WINS hook handling: NetBIOS names from registration packets are passed to a shell without proper validation or escaping. Unsanitized NetBIOS name data from WINS registration packets are inserted into a shell command and executed by the Samba Active Directory Domain Controller’s wins hook, allowing an unauthenticated network attacker to achieve remote command execution as the Samba process.
CVE-2025-10230
A flaw was found in Samba, in the front-end WINS hook handling: NetBIO ...
BDU:2025-13037
Уязвимость реализации сервера разрешения имён WINS пакета программ сетевого взаимодействия Samba, позволяющая нарушителю выполнить произвольный код
openSUSE-SU-2025:20048-1
Security update for samba
SUSE-SU-2025:3677-1
Security update for samba
SUSE-SU-2025:3676-1
Security update for samba
SUSE-SU-2025:03618-1
Security update for samba
SUSE-SU-2025:03612-1
Security update for samba
SUSE-SU-2025:03604-1
Security update for samba
SUSE-SU-2025:03603-1
Security update for samba
ROS-20251124-07
Множественные уязвимости samba
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
| GHSA-88qg-f543-x242 A flaw was found in Samba, in the front-end WINS hook handling: NetBIOS names from registration packets are passed to a shell without proper validation or escaping. Unsanitized NetBIOS name data from WINS registration packets are inserted into a shell command and executed by the Samba Active Directory Domain Controller’s wins hook, allowing an unauthenticated network attacker to achieve remote command execution as the Samba process. | CVSS3: 10 | 40% Средний | 9 месяцев назад |
 | CVE-2025-10230 A flaw was found in Samba, in the front-end WINS hook handling: NetBIOS names from registration packets are passed to a shell without proper validation or escaping. Unsanitized NetBIOS name data from WINS registration packets are inserted into a shell command and executed by the Samba Active Directory Domain Controller’s wins hook, allowing an unauthenticated network attacker to achieve remote command execution as the Samba process. | CVSS3: 10 | 40% Средний | 9 месяцев назад |
 | CVE-2025-10230 A flaw was found in Samba, in the front-end WINS hook handling: NetBIOS names from registration packets are passed to a shell without proper validation or escaping. Unsanitized NetBIOS name data from WINS registration packets are inserted into a shell command and executed by the Samba Active Directory Domain Controller’s wins hook, allowing an unauthenticated network attacker to achieve remote command execution as the Samba process. | CVSS3: 10 | 40% Средний | 10 месяцев назад |
 | CVE-2025-10230 A flaw was found in Samba, in the front-end WINS hook handling: NetBIOS names from registration packets are passed to a shell without proper validation or escaping. Unsanitized NetBIOS name data from WINS registration packets are inserted into a shell command and executed by the Samba Active Directory Domain Controller’s wins hook, allowing an unauthenticated network attacker to achieve remote command execution as the Samba process. | CVSS3: 10 | 40% Средний | 9 месяцев назад |
| CVE-2025-10230 A flaw was found in Samba, in the front-end WINS hook handling: NetBIO ... | CVSS3: 10 | 40% Средний | 9 месяцев назад |
 | BDU:2025-13037 Уязвимость реализации сервера разрешения имён WINS пакета программ сетевого взаимодействия Samba, позволяющая нарушителю выполнить произвольный код | CVSS3: 10 | 40% Средний | 10 месяцев назад |
 | openSUSE-SU-2025:20048-1 Security update for samba | 9 месяцев назад | ||
| SUSE-SU-2025:3677-1 Security update for samba | 10 месяцев назад | ||
| SUSE-SU-2025:3676-1 Security update for samba | 10 месяцев назад | ||
| SUSE-SU-2025:03618-1 Security update for samba | 10 месяцев назад | ||
| SUSE-SU-2025:03612-1 Security update for samba | 10 месяцев назад | ||
| SUSE-SU-2025:03604-1 Security update for samba | 10 месяцев назад | ||
| SUSE-SU-2025:03603-1 Security update for samba | 10 месяцев назад | ||
 | ROS-20251124-07 Множественные уязвимости samba | CVSS3: 10 | 8 месяцев назад |
Уязвимостей на страницу