CVE-2025-0315

HIGH7.5EPSS 0.08%

Ollama Allocation of Resources Without Limits or Throttling vulnerability

Published: 3/20/2025Modified: 3/31/2025

Also known as:GHSA-fccc-8m69-8r78GO-2025-3557

Description

A vulnerability in ollama/ollama <=0.3.14 allows a malicious user to create a customized GGUF model file, upload it to the Ollama server, and create it. This can cause the server to allocate unlimited memory, leading to a Denial of Service (DoS) attack.

Affected packages (2)

Go/github.com/ollama/ollamafrom 0, <= 0.3.14
Go/github.com/ollama/ollamafrom 0

CVSS scores

Source	Version	Severity	Vector
osv	CVSS 3.1	HIGH7.5	CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

References (4)

ADVISORYhttps://github.com/advisories/GHSA-fccc-8m69-8r78
ADVISORYhttps://nvd.nist.gov/vuln/detail/CVE-2025-0315
PATCHhttps://github.com/ollama/ollama
WEBhttps://huntr.com/bounties/da414d29-b55a-496f-b135-17e0fcec67bc