Critical Flaws in Ollama AI Framework Could Enable DoS, Model Theft, and Poisoning

🗓️ 04 Nov 2024 14:08:00Reported by The Hacker NewsType

Critical flaws in Ollama AI Framework could enable DoS, model theft, and poisoning. Six vulnerabilities disclosed, including CVE-2024-39719, CVE-2024-39720, CVE-2024-39721, and CVE-2024-39722

Reporter	Title	Published	Views	Family All 158
GithubExploit	Exploit for Path Traversal in Ollama	26 Jun 202403:11	–	githubexploit
GithubExploit	Exploit for Generation of Error Message Containing Sensitive Information in Ollama	8 May 202508:03	–	githubexploit
GithubExploit	Evil-Ollama	24 Jul 202617:36	–	githubexploit
GithubExploit	Exploit for Path Traversal in Ollama	7 May 202507:01	–	githubexploit
ATTACKERKB	CVE-2024-37032	31 May 202404:15	–	attackerkb
BDU FSTEC	The vulnerability of Ollama’s system for running and managing large language models lies in errors in processing the relative path to the catalog. This allows a malicious actor to gain access to arbitrary files within the vulnerable system.	10 Jul 202400:00	–	bdu_fstec
BDU FSTEC	The vulnerability of Ollama’s system for running and managing large language models, related to out-of-memory reading, allows a perpetrator to trigger a service failure.	12 Dec 202400:00	–	bdu_fstec
BDU FSTEC	The vulnerability of Ollama’s system for launching and managing large language models, related to the exposure of system data to unauthorized individuals, allows a violator to trigger a service failure.	16 Dec 202400:00	–	bdu_fstec
BDU FSTEC	The vulnerability of Ollama’s system for running and managing large language models, related to uncontrolled resource consumption, allows a hacker to trigger a service failure.	16 Dec 202400:00	–	bdu_fstec
BDU FSTEC	The vulnerability of Ollama’s system for running and managing large language models lies in the improper restriction on the path name to the restricted-access catalog, which allows a violator to trigger a service failure.	16 Dec 202400:00	–	bdu_fstec

05 Nov 2024 03:07Current

8.1High risk

Vulners AI Score8.1

CVSS 3.18.8

EPSS0.89633

SSVC