GHSA-p2wh-w96x-w232

ghsaUSosv

Ollama Denial of Service (DoS) via Null Pointer Dereference

view advisory published 2025-03-20Licence: CC-BY-4.0

A vulnerability in ollama/ollama versions <=0.3.14 allows a malicious user to create a customized GGUF model file that, when uploaded and created on the Ollama server, can cause a crash due to an unchecked null pointer dereference. This can lead to a Denial of Service (DoS) attack via remote network.

describes (1)

Related CVEs.

ID	severity	EPSS	exploitable	published
CVE-2025-0312US	high7.5	0.64% (51st)	—	2025-03-20
A vulnerability in ollama/ollama versions <=0.3.14 allows a malicious user to create a customized GGUF model file that, when uploaded and created on the Ollama server, can cause a…

references

External citations — patches, advisories, analysis.

https://github.com/ollama/ollamaPACKAGE
https://huntr.com/bounties/522c87b6-a7ac-41b2-84f3-62fd58921f21WEB
https://nvd.nist.gov/vuln/detail/CVE-2025-0312ADVISORY

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan