CVE-2016-2115

CVE-2016-2115, known as "Badlock," is a critical vulnerability affecting Samba versions 3.x and 4.x before specific patched releases. It allows man-in-the-middle attackers to spoof SMB clients by modifying data streams due to a lack of SMB signing enforcement within DCERPC sessions over ncacn_np. The vulnerability has a CVSS score of 5.9 (Medium) with a high impact on integrity, requiring high attack complexity but no user interaction. While there is no known active exploitation or public exploit code (Metasploit, Nuclei, ExploitDB), it garnered significant community attention and media coverage at the time of its disclosure.