Описание
A vulnerability in ollama/ollama versions <=0.3.14 allows a malicious user to upload and create a customized GGUF model file on the Ollama server. This can lead to a division by zero error in the ggufPadding function, causing the server to crash and resulting in a Denial of Service (DoS) attack.
Ссылки
- ExploitThird Party Advisory
Уязвимые конфигурации
Конфигурация 1Версия до 0.3.14 (включая)
cpe:2.3:a:ollama:ollama:*:*:*:*:*:*:*:*
EPSS
Процентиль: 61%
0.00414
Низкий
7.5 High
CVSS3
7.5 High
CVSS3
Дефекты
CWE-369
CWE-369
Связанные уязвимости
CVSS3: 7.5
redhat
10 месяцев назад
A vulnerability in ollama/ollama versions <=0.3.14 allows a malicious user to upload and create a customized GGUF model file on the Ollama server. This can lead to a division by zero error in the ggufPadding function, causing the server to crash and resulting in a Denial of Service (DoS) attack.
CVSS3: 7.5
debian
10 месяцев назад
A vulnerability in ollama/ollama versions <=0.3.14 allows a malicious ...
EPSS
Процентиль: 61%
0.00414
Низкий
7.5 High
CVSS3
7.5 High
CVSS3
Дефекты
CWE-369
CWE-369