7 matches found
CVE-2025-44779
An issue in Ollama v0.1.33 allows attackers to delete arbitrary files via sending a crafted packet to the endpoint /api/pull...
CVE-2025-0317 Divide By Zero in ollama/ollama
A vulnerability in ollama/ollama versions =0.3.14 allows a malicious user to upload and create a customized GGUF model file on the Ollama server. This can lead to a division by zero error in the ggufPadding function, causing the server to crash and resulting in a Denial of Service DoS attack...
CVE-2024-39720
An issue was discovered in Ollama before 0.1.46. An attacker can use two HTTP requests to upload a malformed GGUF file containing just 4 bytes starting with the GGUF custom magic header. By leveraging a custom Modelfile that includes a FROM statement pointing to the attacker-controlled blob file,...
CVE-2024-39721
An issue was discovered in Ollama before 0.1.34. The CreateModelHandler function uses os.Open to read a file until completion. The req.Path parameter is user-controlled and can be set to /dev/random, which is blocking, causing the goroutine to run infinitely even after the HTTP request is aborted...
CVE-2024-39720
The Ollama application (versions prior to 0.1.46 ) is vulnerable to a crash via a segmentation fault (signal SIGSEGV ) in the CreateModel route. An attacker can trigger this by using two HTTP requests to upload a malformed GGUF file—containing only 4 bytes with the GGUF custom magic header—and th...
CVE-2024-39722
Ollama versions prior to 0.1.46 are vulnerable to a path traversal flaw in the api/push route. This security weakness allows an attacker to determine which files exist on the server by sending specially crafted requests, effectively performing a model existence disclosure . Evidence of exploitati...