PT-2025-12217 · Ollama · Ollama

Published 2025-03-20 · Updated 2025-05-20 · CVE-2024-8063

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions ollama/ollama version v0.3.3

Description A divide by zero issue exists when importing GGUF models with a crafted type for block count in the Modelfile, leading to a denial of service (DoS) condition that causes the server to crash.

Recommendations For version v0.3.3, consider restricting the import of GGUF models or validating the type for block count to prevent the denial of service condition until a patch is available.

Exploit

Fix

Divide By Zero

Weakness Enumeration

CWE-369

Related Identifiers

CVE-2024-8063

GHSA-2XF2-GJM6-G2C6

GO-2025-3689

OPENSUSE-SU-2025:15135-1

PYSEC-2025-144

Affected Products

Ollama

References · 24

• 🔥 https://huntr.com/bounties/fd8e1ed6-21d2-4c9e-8395-2098f11b7db9 · Exploit
• https://osv.dev/vulnerability/PYSEC-2025-144 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2025:15135-1 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-2xf2-gjm6-g2c6 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2024-8063 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-8063 · Security Note
• https://osv.dev/vulnerability/GO-2025-3689 · Vendor Advisory
• https://github.com/ollama/ollama · Note
• https://github.com/ollama/ollama/issues/8020 · Note
• https://github.com/pypa/advisory-database/tree/main/vulns/ollama/PYSEC-2025-144.yaml · Note
• https://suse.com/security/cve/CVE-2025-4432 · Note
• https://suse.com/security/cve/CVE-2024-52290 · Note
• https://suse.com/security/cve/CVE-2025-3757 · Note
• https://lists.opensuse.org/archives/list/[e-mail]/thread/QOPKRPL75SZMLT3YSQAZEDWH7RBRXGJK · Note
• https://suse.com/security/cve/CVE-2025-46735 · Note