CVE-2016-2123

CVE-2016-2123 is a critical vulnerability affecting Samba versions 4.0.0 through 4.5.2, stemming from an integer wrap issue in the ndr_pull_dnsp_name routine that leads to an attacker-controlled memory overwrite. This flaw allows any authenticated LDAP user to write to the dnsRecord attribute on new DNS objects, enabling remote privilege escalation. With a CVSS score of 8.8 (High), this vulnerability presents a significant risk due to its network-based attack vector, low attack complexity, and high impact on confidentiality, integrity, and availability. There is currently no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage surrounding this CVE.