GO-2025-3548

vendorUSosv

Ollama Vulnerable to Denial of Service (DoS) via Crafted GZIP in github.com/ollama/ollama

view advisory published 2025-03-31Licence: per source

Ollama Vulnerable to Denial of Service (DoS) via Crafted GZIP in github.com/ollama/ollama

01

describes (1)

Related CVEs.

IDseverity exploitable
CVE-2024-12886US—Exploit
An Out-Of-Memory (OOM) vulnerability exists in the `ollama` server version 0.3.14. This vulnerability can be triggered when a malicious API server responds with a gzip bomb HTTP re…
02

references

External citations — patches, advisories, analysis.

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan