Skip to content
fr Sign in
7.5 High

CVE-2024-12886 An Out-Of-Memory (OOM) vulnerability exists in the `ollama` server version 0.3.14

Description

An Out-Of-Memory (OOM) vulnerability exists in the `ollama` server version 0.3.14. This vulnerability can be triggered when a malicious API server responds with a gzip bomb HTTP response, leading to the `ollama` server crashing. The vulnerability is present in the `makeRequestWithRetry` and `getAuthorizationToken` functions, which use `io.ReadAll` to read the response body. This can result in excessive memory usage and a Denial of Service (DoS) condition.

Affected products and versions

Product Affected versions Fixed in
ollama/ollama Versions not published

References

Timeline

  1. Published
  2. Last modified

Other CVEs of ollama/ollama

The 7 CVEs of ollama/ollama →
CVE-2025-1975 A vulnerability in the Ollama server version 0.5.11 allows a malicious user to cause a Denial of Service (DoS) attack by… 7.5 High CVE-2024-8063 A divide by zero vulnerability exists in ollama/ollama version v0.3.3 7.5 High CVE-2025-0312 A vulnerability in ollama/ollama… 7.5 High CVE-2025-0317 A vulnerability in ollama/ollama… 7.5 High
Track this CVE