Ollama Ollama Denial-of-Service Vulnerability via Malicious GGUF Model Upload

A denial-of-service vulnerability has been identified in Ollama Ollama versions through 0.3.14. This issue allows a malicious user to upload and create a customized GGUF model file on the Ollama server. The vulnerability arises from a division by zero error in the ggufPadding function, which can cause the server to crash.

Impact

Exploitation of this vulnerability leads to a server crash, causing a denial-of-service condition.