GHSA-fccc-8m69-8r78HighCVSS 7.5

Ollama Allocation of Resources Without Limits or Throttling vulnerability

Published
March 20, 2025
Last Modified
March 21, 2025

🔗 CVE IDs covered (1)

📋 Description

A vulnerability in ollama/ollama <=0.3.14 allows a malicious user to create a customized GGUF model file, upload it to the Ollama server, and create it. This can cause the server to allocate unlimited memory, leading to a Denial of Service (DoS) attack.

🎯 Affected products1

  • go/github.com/ollama/ollama:<= 0.3.14

🔗 References (3)