CVE-2016-0771

CVE-2016-0771 is an out-of-bounds read vulnerability affecting the internal DNS server in Samba 4.x versions prior to 4.1.23, 4.2.9, 4.3.6, and 4.4.0rc4 when configured as an Active Directory Domain Controller. This medium-severity vulnerability (CVSS 5.9) allows remote authenticated users to trigger a denial of service or potentially leak sensitive information from process memory by uploading a specially crafted DNS TXT record. While it requires authentication and has high attack complexity, the potential impact includes service disruption and information disclosure. There is no evidence of active exploitation, public exploit code, or significant community discussion surrounding this CVE.