Ollama Allocation of Resources Without Limits or Throttling vulnerability

GHSA-fccc-8m69-8r78 · CVE-2025-0315 · GO-2025-3557 · 갱신 2026. 9. 10.

해야 할 일

아직 수정 버전이 없습니다. 원문의 우회 방법을 확인하고 노출 범위를 줄이세요.

영향 받는 패키지

생태계	패키지	수정 버전
Go	github.com/ollama/ollama	없음

원문

Ollama Allocation of Resources Without Limits or Throttling vulnerability

A vulnerability in ollama/ollama <=0.3.14 allows a malicious user to create a customized GGUF model file, upload it to the Ollama server, and create it. This can cause the server to allocate unlimited memory, leading to a Denial of Service (DoS) attack.

출처

ADVISORYhttps://nvd.nist.gov/vuln/detail/CVE-2025-0315
PACKAGEhttps://github.com/ollama/ollama
WEBhttps://huntr.com/bounties/da414d29-b55a-496f-b135-17e0fcec67bc

오늘 목록으로

Ollama Allocation of Resources Without Limits or Throttling vulnerability (GHSA-fccc-8m69-8r78) · Sieve