CVE-2024-12886

An Out-Of-Memory OOM vulnerability exists in the "ollama" server version 0.3.14. This vulnerability can be triggered when a malicious API server responds with a gzip bomb HTTP response, leading to the "ollama" server crashing. The vulnerability is present in the "makeRequestWithRetry" and...