CVE-2025-0317

HIGH7.5EPSS 2.1%

Ollama Divide By Zero vulnerability

Published: 3/20/2025Modified: 3/31/2025

Also known as:GHSA-9gcr-28rp-cc24GO-2025-3559

Description

A vulnerability in ollama/ollama versions <=0.3.14 allows a malicious user to upload and create a customized GGUF model file on the Ollama server. This can lead to a division by zero error in the ggufPadding function, causing the server to crash and resulting in a Denial of Service (DoS) attack.

Affected packages (2)

Go/github.com/ollama/ollamafrom 0, <= 0.3.14
Go/github.com/ollama/ollamafrom 0

CVSS scores

Source	Version	Severity	Vector
osv	CVSS 3.1	HIGH7.5	CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

References (4)

ADVISORYhttps://github.com/advisories/GHSA-9gcr-28rp-cc24
ADVISORYhttps://nvd.nist.gov/vuln/detail/CVE-2025-0317
PATCHhttps://github.com/ollama/ollama
WEBhttps://huntr.com/bounties/a9951bca-9bd8-49b2-b143-4cd4219f9fa0