CVE-2025-0317

HIGH7.5EPSS 2.1%

Ollama Divide By Zero vulnerability

發布日:2025/3/20修改日:2025/3/31

也稱為:GHSA-9gcr-28rp-cc24GO-2025-3559

描述

A vulnerability in ollama/ollama versions <=0.3.14 allows a malicious user to upload and create a customized GGUF model file on the Ollama server. This can lead to a division by zero error in the ggufPadding function, causing the server to crash and resulting in a Denial of Service (DoS) attack.

受影響套件(2)

Go/github.com/ollama/ollamafrom 0, <= 0.3.14
Go/github.com/ollama/ollamafrom 0

CVSS 分數

來源	版本	嚴重程度	向量
osv	CVSS 3.1	HIGH7.5	CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

參考連結(4)

ADVISORYhttps://github.com/advisories/GHSA-9gcr-28rp-cc24
ADVISORYhttps://nvd.nist.gov/vuln/detail/CVE-2025-0317
PATCHhttps://github.com/ollama/ollama
WEBhttps://huntr.com/bounties/a9951bca-9bd8-49b2-b143-4cd4219f9fa0