GHSA-2xf2-gjm6-g2c6
Ollama Divide by Zero Vulnerability
Packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| Go | github.com/ollama/ollama | <= 0.3.3 | no fix listed |
Details
As written in the advisory (Markdown source, shown as plain text).
A divide by zero vulnerability exists in ollama/ollama version v0.3.3. The vulnerability occurs when importing GGUF models with a crafted type for `block_count` in the Modelfile. This can lead to a denial of service (DoS) condition when the server processes the model, causing it to crash.
References
External links from the advisory. They lead to third-party sites.