Lucene search

K
vulnrichmentMitreVULNRICHMENT:CVE-2024-28224
HistoryApr 08, 2024 - 12:00 a.m.

CVE-2024-28224

2024-04-0800:00:00
mitre
github.com
1
ollama vulnerability
dns rebinding
remote access
api
unauthorized user
chat
model deletion
denial of service

AI Score

6.9

Confidence

High

SSVC

Exploitation

none

Automatable

no

Technical Impact

partial

Ollama before 0.1.29 has a DNS rebinding vulnerability that can inadvertently allow remote access to the full API, thereby letting an unauthorized user chat with a large language model, delete a model, or cause a denial of service (resource exhaustion).

AI Score

6.9

Confidence

High

SSVC

Exploitation

none

Automatable

no

Technical Impact

partial

Related for VULNRICHMENT:CVE-2024-28224