Ollama Denial-of-Service Vulnerability via Malicious gguf Model File

A denial-of-service vulnerability has been identified in Ollama versions through 0.3.14. This issue allows a malicious user to upload a customized gguf model file to the public Ollama server. The server crashes while processing this harmful model, leading to a denial-of-service condition. The vulnerability arises from an out-of-bounds read in the gguf.go file.

Impact

Exploitation of this vulnerability causes the server to crash, creating a denial-of-service condition.