7 matches found
Ollama System Data Compromise Check Missing
The vulnerability of the Ollama system for running and managing large language models is related to the loading of code without checking its integrity. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
Ollama System Code Execution
The vulnerability of the Ollama system for running and managing large language models is related to an incorrect restriction on the path name to the catalog. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...
Ollama Loader Unauthenticated Access
The vulnerability of the loader for GGUF models in the Ollama system, which is used to run and manage large language models, involves reading data beyond the permitted range in memory. Exploiting this vulnerability could allow a malicious actor to gain unauthorized access to protected information...
Ollama Code Execution
The vulnerability of Ollama’s system for running and managing large language models is related to insufficient validation of input data. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...
Ollama Path Traversal DoS
The vulnerability of the Ollama system for running and managing large language models is related to an incorrect restriction on the path name to the restricted-access catalog. Exploiting this vulnerability could allow a malicious actor to trigger a service failure...
Ollama System Out-of-Memory DoS
The vulnerability of the Ollama system for running and managing large language models is related to memory-bound reading. Exploiting this vulnerability could allow a malicious actor to trigger a service disruption segmentation attack through the use of a specially created file...
Ollama Reverse DNS Rebinding
The vulnerability of Ollama’s system for running and managing large language models is related to the use of reverse DNS resolution for IP addresses. Exploiting this vulnerability could allow a remote attacker to perform a DNS Rebinding attack or cause a service failure...