Medium severity5.5NVD Advisory· Published Aug 13, 2016· Updated Jun 17, 2026
CVE-2016-5845
CVE-2016-5845
Description
SAP SAPCAR does not check the return value of file operations when extracting files, which allows remote attackers to cause a denial of service (program crash) via an invalid file name in an archive file, aka SAP Security Note 2312905.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2Patches
Vulnerability mechanics
References
7- packetstormsecurity.com/files/138284/SAP-CAR-Archive-Tool-Denial-Of-Service-Security-Bypass.htmlnvdExploitThird Party AdvisoryVDB Entry
- www.coresecurity.com/advisories/sap-car-multiple-vulnerabilitiesnvdExploitThird Party AdvisoryVDB Entry
- seclists.org/fulldisclosure/2016/Aug/46nvdMailing ListThird Party AdvisoryVDB Entry
- www.securityfocus.com/archive/1/539180/100/0/threadednvdThird Party AdvisoryVDB Entry
- www.securityfocus.com/bid/92406nvdThird Party AdvisoryVDB Entry
- www.exploit-db.com/exploits/40230/nvdThird Party AdvisoryVDB Entry
- www.onapsis.com/blog/denial-service-attacks-sap-security-notes-august-2016nvdThird Party AdvisoryVDB Entry
News mentions
0No linked articles in our index yet.