Description
A vulnerability in Ollama versions <=0.3.14 allows a malicious user to create a customized gguf model file that can be uploaded to the public Ollama server. When the server processes this malicious model, it crashes, leading to a Denial of Service (DoS) attack. The root cause of the issue is an out-of-bounds read in the gguf.go file.
INFO
Published Date :
2025-03-20T10:08:47.923Z
Last Modified :
2025-03-20T19:03:30.843Z
Source :
@huntr_ai
AFFECTED PRODUCTS
The following products are affected by CVE-2024-12055 vulnerability.
| Vendors | Products |
|---|---|
| Ollama |
|
REFERENCES
Here, you will find a curated list of external links that provide in-depth information to CVE-2024-12055.
CVSS Vulnerability Scoring System
Detailed values of each vector for above chart.
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality Impact
Integrity Impact
Availability Impact
Detailed values of each vector for above chart.
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality Impact
Integrity Impact
Availability Impact