PT-2025-1977 · Go+2 · Github.Com/Ollama/Ollama+2

Published 2025-01-07 · Updated 2025-10-17 · CVE-2024-12886

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions No specific software name or affected versions are mentioned in the provided descriptions.

Description A security issue has been discovered in a famous LLM product. The estimated number of potentially affected devices worldwide is not specified. There is no information about real-world incidents where this issue was exploited. Technical details about exploitation, such as API endpoints, vulnerable parameters or variables, and function names, are not provided.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Resource Exhaustion

Weakness Enumeration

CWE-400

CWE-409

Related Identifiers

CVE-2024-12886

GHSA-V464-R2R9-WWW7

GO-2025-3548

OPENSUSE-SU-2025:14955-1

Affected Products

Github.Com/Ollama/Ollama

Govulncheck-Vulndb

Ollama/Ollama

References · 16

• https://osv.dev/vulnerability/GO-2025-3548 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-12886 · Security Note
• https://osv.dev/vulnerability/openSUSE-SU-2025:14955-1 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-v464-r2r9-www7 · Vendor Advisory
• https://github.com/ollama/ollama · Note
• https://twitter.com/FuzzingLabs/status/1886498194521252282 · Twitter Post
• https://huntr.com/bounties/f115fe52-58af-4844-ad29-b1c25f7245df · Note
• https://suse.com/security/cve/CVE-2024-12886 · Note
• https://twitter.com/CVEnew/status/1902671115744375202 · Twitter Post
• https://lists.opensuse.org/archives/list/[e-mail]/thread/GT5JSN3VXOPFJR5R2YOR4UYXCVU3UJDI · Note
• https://suse.com/security/cve/CVE-2024-12055 · Note
• https://twitter.com/fede_intern/status/1876682650339119361 · Twitter Post
• https://suse.com/security/cve/CVE-2025-0315 · Note
• https://twitter.com/nkoorty/status/1979195535106970010 · Twitter Post
• https://suse.com/security/cve/CVE-2025-0317 · Note