Description (CNA)
A vulnerability in ollama/ollama versions <=0.3.14 allows a malicious user to upload and create a customized GGUF model file on the Ollama server. This can lead to a division by zero error in the ggufPadding function, causing the server to crash and resulting in a Denial of Service (DoS) attack.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| ollama / ollama/ollama | affected unspecified through latest |
CWE
CWE-369
References
ADP enrichment
No English description supplied.
No references supplied.