Lucene search
GoogleOSV:GHSA-5JX5-HQX5-2VRJHistoryApr 08, 2024 - 9:31 p.m.
Ollama DNS rebinding vulnerability
2024-04-0821:31:16
Google
osv.dev
9
ollama version
dns rebinding
remote access
unauthorized user
api
denial of service
resource exhaustion
Ollama before 0.1.29 has a DNS rebinding vulnerability that can inadvertently allow remote access to the full API, thereby letting an unauthorized user chat with a large language model, delete a model, or cause a denial of service (resource exhaustion).
| CPE | Name | Operator | Version |
|---|---|---|---|
| github.com/ollama/ollama | lt | 0.1.29 |
Related
osv
osv
Ollama DNS rebinding vulnerability in github.com/jmorganca/ollama
2024-06-10 16:38:54
veracode
veracode
DNS Rebinding
2024-04-09 05:40:19
nvd
nvd
CVE-2024-28224
2024-04-08 19:15:07
nessus
nessus
Ollama < 0.1.29 DNS Rebinding
2024-06-07 00:00:00
cve
cve
CVE-2024-28224
2024-04-08 19:15:07
cvelist
cvelist
CVE-2024-28224
2024-04-08 00:00:00
github
github
Ollama DNS rebinding vulnerability
2024-04-08 21:31:16