Ollama Divide by Zero Vulnerability

GHSA-2xf2-gjm6-g2c6 · CVE-2024-8063 · GO-2025-3689 · 갱신 2026. 9. 10.

해야 할 일

아직 수정 버전이 없습니다. 원문의 우회 방법을 확인하고 노출 범위를 줄이세요.

영향 받는 패키지

생태계	패키지	수정 버전
Go	github.com/ollama/ollama	없음

원문

Ollama Divide by Zero Vulnerability

A divide by zero vulnerability exists in ollama/ollama version v0.3.3. The vulnerability occurs when importing GGUF models with a crafted type for block_count in the Modelfile. This can lead to a denial of service (DoS) condition when the server processes the model, causing it to crash.

출처

ADVISORYhttps://nvd.nist.gov/vuln/detail/CVE-2024-8063
WEBhttps://github.com/ollama/ollama/issues/8020
PACKAGEhttps://github.com/ollama/ollama
WEBhttps://github.com/pypa/advisory-database/tree/main/vulns/ollama/PYSEC-2025-144.yaml
WEBhttps://huntr.com/bounties/fd8e1ed6-21d2-4c9e-8395-2098f11b7db9

오늘 목록으로

Ollama Divide by Zero Vulnerability (GHSA-2xf2-gjm6-g2c6) · Sieve