Lucene search
K

11 matches found

SUSE CVE
SUSE CVE
added 2025/03/21 2:53 a.m.1 views

SUSE CVE-2024-8063

A divide by zero vulnerability exists in ollama/ollama version v0.3.3. The vulnerability occurs when importing GGUF models with a crafted type for blockcount in the Modelfile. This can lead to a denial of service DoS condition when the server processes the model, causing it to crash...

7.5CVSS6.7AI score0.00066EPSS
Exploits1References4
Github Security Blog
Github Security Blog
added 2025/03/20 12:32 p.m.11 views

Ollama Divide by Zero Vulnerability

A divide by zero vulnerability exists in ollama/ollama version v0.3.3. The vulnerability occurs when importing GGUF models with a crafted type for blockcount in the Modelfile. This can lead to a denial of service DoS condition when the server processes the model, causing it to crash...

7.5CVSS6.7AI score0.00066EPSS
Exploits1References4Affected Software1
Snyk
Snyk
added 2025/03/20 10:48 a.m.1 views

Division by zero

Overview Affected versions of this package are vulnerable to Division by zero when handling an invalid unknown.blockcount type in a Modelfile. An attacker can cause the application to crash by importing a malicious GGUF. Remediation Upgrade github.com/ollama/ollama/fs/ggml to version 0.6.3-rc1 or...

8.7CVSS6.9AI score0.00066EPSS
Exploits1References2
Snyk
Snyk
added 2025/03/20 10:48 a.m.1 views

Division by zero

Overview Affected versions of this package are vulnerable to Division by zero when handling an invalid unknown.blockcount type in a Modelfile. An attacker can cause the application to crash by importing a malicious GGUF. Remediation Upgrade github.com/ollama/ollama/llm to version 0.6.3-rc1 or...

8.7CVSS6.9AI score0.00066EPSS
Exploits1References2
PyPA
PyPA
added 2025/03/20 10:15 a.m.7 views

PYSEC-2025-144

A divide by zero vulnerability exists in ollama/ollama version v0.3.3. The vulnerability occurs when importing GGUF models with a crafted type for blockcount in the Modelfile. This can lead to a denial of service DoS condition when the server processes the model, causing it to crash...

7.5CVSS7.1AI score0.00066EPSS
Exploits1References1Affected Software1
NVD
NVD
added 2025/03/20 10:15 a.m.6 views

CVE-2024-8063

A divide by zero vulnerability exists in ollama/ollama version v0.3.3. The vulnerability occurs when importing GGUF models with a crafted type for blockcount in the Modelfile. This can lead to a denial of service DoS condition when the server processes the model, causing it to crash...

7.5CVSS0.00066EPSS
Exploits1References1
Vulnrichment
Vulnrichment
added 2025/03/20 10:10 a.m.6 views

CVE-2024-8063 Divide by Zero in ollama/ollama

A divide by zero vulnerability exists in ollama/ollama version v0.3.3. The vulnerability occurs when importing GGUF models with a crafted type for blockcount in the Modelfile. This can lead to a denial of service DoS condition when the server processes the model, causing it to crash...

7.5CVSS7.3AI score0.00066EPSS
Exploits1References1
SUSE CVE
SUSE CVE
added 2024/11/03 3:54 a.m.2 views

SUSE CVE-2024-39720

An issue was discovered in Ollama before 0.1.46. An attacker can use two HTTP requests to upload a malformed GGUF file containing just 4 bytes starting with the GGUF custom magic header. By leveraging a custom Modelfile that includes a FROM statement pointing to the attacker-controlled blob file,...

7.5CVSS7.1AI score0.00285EPSS
Exploits1References6
NVD
NVD
added 2024/10/31 8:15 p.m.22 views

CVE-2024-39720

An issue was discovered in Ollama before 0.1.46. An attacker can use two HTTP requests to upload a malformed GGUF file containing just 4 bytes starting with the GGUF custom magic header. By leveraging a custom Modelfile that includes a FROM statement pointing to the attacker-controlled blob file,...

8.2CVSS0.00285EPSS
Exploits1References2
Vulnrichment
Vulnrichment
added 2024/10/31 12:0 a.m.24 views

CVE-2024-39720

An issue was discovered in Ollama before 0.1.46. An attacker can use two HTTP requests to upload a malformed GGUF file containing just 4 bytes starting with the GGUF custom magic header. By leveraging a custom Modelfile that includes a FROM statement pointing to the attacker-controlled blob file,...

6.9AI score0.00285EPSS
Exploits1References2
CVE
CVE
added 2024/10/31 12:0 a.m.102 views

CVE-2024-39720

CVE-2024-39720 affects Ollama prior to 0.1.46. An attacker can craft and send two HTTP requests to upload a malformed GGUF file (4 bytes) beginning with the GGUF header, using a malicious Modelfile that FROM-references an attacker-controlled blob file. This triggers a crash in the CreateModel rou...

8.2CVSS7AI score0.00285EPSS
Exploits1References2Affected Software1
Rows per page
Query Builder