CVE-2015-5370

CVE-2015-5370, also known as "Badlock," is a critical vulnerability affecting Samba versions 3.x and 4.x before specific patch levels, impacting canonical samba and ubuntu_linux distributions. This flaw in the DCE-RPC layer allows remote attackers to conduct protocol-downgrade attacks, leading to denial of service through application crashes or high CPU consumption, and potentially arbitrary code execution on client systems. Rated with a CVSS score of 5.9 (Medium) due to its network attack vector and high impact on integrity, exploitation requires high attack complexity. While there is no evidence of active exploitation, public exploit code, or Metasploit/Nuclei modules, the vulnerability garnered significant media attention with one article and one community discussion, indicating a degree of awareness despite its inactive status on the KEV catalog.