ollama/ollama
cpe:2.3:a:ollama:ollama:*:*:*:*:*:*:*
- <= 0.3.14
A denial-of-service vulnerability has been identified in Ollama Ollama versions through 0.3.14. This issue allows a malicious user to create a customized GGUF model file that, when uploaded to the Ollama server, can cause a crash by triggering an unchecked null pointer dereference. The resulting crash leads to a denial-of-service condition via remote network.
Exploitation of this vulnerability causes the Ollama server to crash, leading to a denial-of-service condition.
Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.