Ollama Loader Unauthenticated Access

The vulnerability of the loader for GGUF models in the Ollama system, which is used to run and manage large language models, involves reading data beyond the permitted range in memory. Exploiting this vulnerability could allow a malicious actor to gain unauthorized access to protected information...

Ollama System Data Compromise Check Missing

The vulnerability of the Ollama system for running and managing large language models is related to the loading of code without checking its integrity. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

Ollama System Code Execution

The vulnerability of the Ollama system for running and managing large language models is related to an incorrect restriction on the path name to the catalog. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

Ollama Code Execution

The vulnerability of Ollama’s system for running and managing large language models is related to insufficient validation of input data. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

Ollama Path Traversal DoS

The vulnerability of the Ollama system for running and managing large language models is related to an incorrect restriction on the path name to the restricted-access catalog. Exploiting this vulnerability could allow a malicious actor to trigger a service failure...

Ollama System Out-of-Memory DoS

The vulnerability of the Ollama system for running and managing large language models is related to memory-bound reading. Exploiting this vulnerability could allow a malicious actor to trigger a service disruption segmentation attack through the use of a specially created file...

Ollama Reverse DNS Rebinding

The vulnerability of Ollama’s system for running and managing large language models is related to the use of reverse DNS resolution for IP addresses. Exploiting this vulnerability could allow a remote attacker to perform a DNS Rebinding attack or cause a service failure...