ollama

ollama هذا المستودع هو هدف عرض توضيحي اصطناعي لـ Endor Labs EXPOSURE. الحالة الحالية ضعيفة عمدًا HOT. ستبلغ EXPOSURE عن حكم HOT ضدها. CVE المتعقبة: CVE-2024-12886 لا يوجد إصلاح من المصدر؛ تم التخفيف فقط عبر تحكم تعويضي. يقوم PR تجريبي تم فتحه بواسطة EXPOSURE بتبديل ملف التهيئة الأساسي بنسخة محسّن...

CVE-2024-12886

An Out-Of-Memory OOM vulnerability exists in the ollama server version 0.3.14. This vulnerability can be triggered when a malicious API server responds with a gzip bomb HTTP response, leading to the ollama server crashing. The vulnerability is present in the makeRequestWithRetry and...

CVE-2024-12886 Out-Of-Memory (OOM) Vulnerability in ollama/ollama

An Out-Of-Memory OOM vulnerability exists in the ollama server version 0.3.14. This vulnerability can be triggered when a malicious API server responds with a gzip bomb HTTP response, leading to the ollama server crashing. The vulnerability is present in the makeRequestWithRetry and...

Ollama 0.5.11 Denial of Service

Ollama supports importing and parsing user-uploaded customized GGUF models via the network request by default. This functionality can be manipulated to cause an out-of-memory denial of service attack. Title: The malicious gguf model can lead to DoS due to out of memory killed via network in ollam...

Ollama 0.5.11 Denial of Service Exploit

Ollama supports importing and parsing user-uploaded customized GGUF models via the network request by default. This functionality can be manipulated to cause an out-of-memory denial of service attack. Title: The malicious gguf model can lead to DoS due to out of memory killed via network in ollam...