CVE-2016-2118

CVE-2016-2118, known as "BADLOCK," is a critical vulnerability affecting Samba 3.x and 4.x versions across various Linux distributions, including Canonical and Debian. It stems from improper handling of DCERPC connections in the MS-SAMR and MS-LSAD protocols, enabling man-in-the-middle attackers to perform protocol-downgrade attacks and impersonate users by altering data streams. With a CVSS score of 7.5 (HIGH) and a FAUCET Risk Score of 98/100, this vulnerability presents a significant risk due to its network-based attack vector, high impact on confidentiality, integrity, and availability, despite requiring high attack complexity. While there is no evidence of active exploitation, public exploit code, or Metasploit modules, its high EPSS score and media coverage indicate a recognized threat that warrants immediate patching.