In short
- CVE-2024-8063 is a HIGH (CVSS 7.5) vulnerability affecting github.com/ollama/ollama, ollama, ollama (ollama).
- Chance of exploitation in the next 30 days (EPSS): 0.64%, higher than 50.8% of all vulnerabilities.
- No patched version is listed yet: follow the vendor's advisory in References.
Description
A divide by zero vulnerability exists in ollama/ollama version v0.3.3. The vulnerability occurs when importing GGUF models with a crafted type for block_count in the Modelfile. This can lead to a denial of service (DoS) condition when the server processes the model, causing it to crash.
NVD description
A divide by zero vulnerability exists in ollama/ollama version v0.3.3. The vulnerability occurs when importing GGUF models with a crafted type for `block_count` in the Modelfile. This can lead to a denial of service (DoS) condition when the server processes the model, causing it to crash.
More vulnerabilities in github.com/ollama/ollama
See all →Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free