CVE-2016-2112

CVE-2016-2112, also known as "Badlock," is a critical vulnerability affecting the bundled LDAP client library in Samba 3.x and 4.x versions prior to specified patches. This flaw allows man-in-the-middle attackers to conduct LDAP protocol-downgrade attacks due to the client library failing to recognize the "client ldap sasl wrapping" setting, enabling modification of the client-server data stream. Rated with a CVSS score of 5.9 (Medium), the vulnerability has a network attack vector and high integrity impact, but requires high attack complexity. While it garnered significant media attention and community discussion upon disclosure, there is no evidence of active exploitation, and public exploit code (Metasploit, Nuclei, ExploitDB) is currently unavailable.