CVE-2025-0315
CVSS 3.1 Score 7.5 of 10 (high)
Details
Published Mar 20, 2025
Updated: Apr 2, 2025
CWE ID 770
Summary
CVE-2025-0315 is a newly identified vulnerability affecting ollama/ollama versions up to 0.3.14. A malicious user can exploit this issue by creating a customized GGUF model file and uploading it to the Ollama server. Upon creation, the server allocates unlimited memory, resulting in a Denial of Service (DoS) attack. This issue could lead to significant disruptions if left unaddressed. It is strongly recommended that users upgrade to the latest version of ollama to mitigate this risk.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Vendors
- Ollama