CVE-2025-0317
High · 7.5Ollama Divide By Zero vulnerability
CVSS
7.5
EPSS
14.2%
Published
Mar 20, 2025
CISA due date
—
The record
A vulnerability in ollama/ollama versions <=0.3.14 allows a malicious user to upload and create a customized GGUF model file on the Ollama server. This can lead to a division by zero error in the ggufPadding function, causing the server to crash and resulting in a Denial of Service (DoS) attack.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| Go | github.com/ollama/ollama | 0 | No fix |
| openSUSE:Tumbleweed | govulncheck-vulndb | 0 | 0.0.20250331T171002-1.1 |
Related vulnerabilities
- CVE-2025-63389 Ollama Platform has missing authentication enabling attackers to perform model management… Also affects github.com/ollama/ollama
- CVE-2025-51471 Ollama vulnerable to Cross-Domain Token Exposure Also affects github.com/ollama/ollama
- CVE-2024-37032 Ollama before 0.1.34 does not validate the format of the digest (sha256 with 64 hex… Also affects github.com/ollama/ollama
- CVE-2025-61141 sqls-server/sqls 0.2.28 is vulnerable to command injection in the config command because… Also affects govulncheck-vulndb
- CVE-2025-54471 NeuVector used a hard-coded cryptographic key embedded in the source code. Also affects govulncheck-vulndb
- CVE-2025-54470 This vulnerability affects NeuVector deployments only when the Report anonymous cluster… Also affects govulncheck-vulndb
- CVE-2025-54469 A vulnerability was identified in NeuVector, where the enforcer used environment… Also affects govulncheck-vulndb
- CVE-2024-58269 A vulnerability has been identified in Rancher Manager, where sensitive information… Also affects govulncheck-vulndb