Lucene search
+L

12 matches found

SUSE CVE
SUSE CVE
•added 2025/03/21 2:53 a.m.•8 views

SUSE CVE-2024-8063

A divide by zero vulnerability exists in ollama/ollama version v0.3.3. The vulnerability occurs when importing GGUF models with a crafted type for blockcount in the Modelfile. This can lead to a denial of service DoS condition when the server processes the model, causing it to crash...

7.5CVSS6.7AI score0.0063EPSS
SaveExploits1References4
Github Security Blog
Github Security Blog
•added 2025/03/20 12:32 p.m.•23 views

Ollama Divide by Zero Vulnerability

A divide by zero vulnerability exists in ollama/ollama version v0.3.3. The vulnerability occurs when importing GGUF models with a crafted type for blockcount in the Modelfile. This can lead to a denial of service DoS condition when the server processes the model, causing it to crash...

7.5CVSS6.7AI score0.0063EPSS
SaveExploits1References5Affected Software1
Snyk
Snyk
•added 2025/03/20 10:48 a.m.•6 views

Division by zero

Overview Affected versions of this package are vulnerable to Division by zero when handling an invalid unknown.blockcount type in a Modelfile. An attacker can cause the application to crash by importing a malicious GGUF. Remediation Upgrade github.com/ollama/ollama/llm to version 0.6.3-rc1 or...

8.7CVSS6.9AI score0.0063EPSS
SaveExploits1References2
Snyk
Snyk
•added 2025/03/20 10:48 a.m.•3 views

Division by zero

Overview Affected versions of this package are vulnerable to Division by zero when handling an invalid unknown.blockcount type in a Modelfile. An attacker can cause the application to crash by importing a malicious GGUF. Remediation Upgrade github.com/ollama/ollama/fs/ggml to version 0.6.3-rc1 or...

8.7CVSS6.9AI score0.0063EPSS
SaveExploits1References2
PyPA
PyPA
•added 2025/03/20 10:15 a.m.•20 views

PYSEC-2025-144

A divide by zero vulnerability exists in ollama/ollama version v0.3.3. The vulnerability occurs when importing GGUF models with a crafted type for blockcount in the Modelfile. This can lead to a denial of service DoS condition when the server processes the model, causing it to crash...

7.5CVSS7.1AI score0.0063EPSS
SaveExploits1References1Affected Software1
NVD
NVD
•added 2025/03/20 10:15 a.m.•21 views

CVE-2024-8063

A divide by zero vulnerability exists in ollama/ollama version v0.3.3. The vulnerability occurs when importing GGUF models with a crafted type for blockcount in the Modelfile. This can lead to a denial of service DoS condition when the server processes the model, causing it to crash...

7.5CVSS0.0063EPSS
SaveExploits1References1
Vulnrichment
Vulnrichment
•added 2025/03/20 10:10 a.m.•10 views

CVE-2024-8063 Divide by Zero in ollama/ollama

A divide by zero vulnerability exists in ollama/ollama version v0.3.3. The vulnerability occurs when importing GGUF models with a crafted type for blockcount in the Modelfile. This can lead to a denial of service DoS condition when the server processes the model, causing it to crash...

7.5CVSS7.3AI score0.0063EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/03/20 12:00 a.m.•2 views

CVE-2024-8063: Divide By Zero

A divide by zero vulnerability exists in ollama/ollama version v0.3.3. The vulnerability occurs when importing GGUF models with a crafted type for blockcount in the Modelfile. This can lead to a denial of service DoS condition when the server processes the model, causing it to crash...

7.5CVSS7.3AI score0.0063EPSS
SaveExploits1References1
SUSE CVE
SUSE CVE
•added 2024/11/03 3:54 a.m.•9 views

SUSE CVE-2024-39720

An issue was discovered in Ollama before 0.1.46. An attacker can use two HTTP requests to upload a malformed GGUF file containing just 4 bytes starting with the GGUF custom magic header. By leveraging a custom Modelfile that includes a FROM statement pointing to the attacker-controlled blob file,...

7.5CVSS7.1AI score0.02463EPSS
SaveExploits1References6
NVD
NVD
•added 2024/10/31 8:15 p.m.•40 views

CVE-2024-39720

An issue was discovered in Ollama before 0.1.46. An attacker can use two HTTP requests to upload a malformed GGUF file containing just 4 bytes starting with the GGUF custom magic header. By leveraging a custom Modelfile that includes a FROM statement pointing to the attacker-controlled blob file,...

8.2CVSS0.02463EPSS
SaveExploits1References2
Vulnrichment
Vulnrichment
•added 2024/10/31 12:00 a.m.•28 views

CVE-2024-39720

An issue was discovered in Ollama before 0.1.46. An attacker can use two HTTP requests to upload a malformed GGUF file containing just 4 bytes starting with the GGUF custom magic header. By leveraging a custom Modelfile that includes a FROM statement pointing to the attacker-controlled blob file,...

6.9AI score0.02463EPSS
SaveExploits1References2
CVE
CVE
•added 2024/10/31 12:00 a.m.•151 views

CVE-2024-39720

The Ollama application (versions prior to 0.1.46 ) is vulnerable to a crash via a segmentation fault (signal SIGSEGV ) in the CreateModel route. An attacker can trigger this by using two HTTP requests to upload a malformed GGUF file—containing only 4 bytes with the GGUF custom magic header—and th...

8.2CVSS7AI score0.02463EPSS
SaveExploits1References2Affected Software1
Rows per page
Query Builder