Beveiligingsadvies

CVE-2024-8063

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2025-03-20 10:10:56
Laatst bijgewerkt 2025-03-20 18:14:42
Toegewezen door @huntr_ai
CVSS-score 7.5
Status PUBLISHED

Beschrijving

A divide by zero vulnerability exists in ollama/ollama version v0.3.3. The vulnerability occurs when importing GGUF models with a crafted type for `block_count` in the Modelfile. This can lead to a denial of service (DoS) condition when the server processes the model, causing it to crash.