GHSA-fccc-8m69-8r78HighCVSS 7.5
Ollama Allocation of Resources Without Limits or Throttling vulnerability
🔗 CVE IDs covered (1)
📋 Description
A vulnerability in ollama/ollama <=0.3.14 allows a malicious user to create a customized GGUF model file, upload it to the Ollama server, and create it. This can cause the server to allocate unlimited memory, leading to a Denial of Service (DoS) attack.
🎯 Affected products1
- go/github.com/ollama/ollama:<= 0.3.14