Skip to content
CVE PROGRAM SOURCE RECORD7.5 High

CVE-2025-0315

Allocation of Resources Without Limits or Throttling in ollama/ollama

Description

A vulnerability in ollama/ollama <=0.3.14 allows a malicious user to create a customized GGUF model file, upload it to the Ollama server, and create it. This can cause the server to allocate unlimited memory, leading to a Denial of Service (DoS) attack.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

ollama ollama/ollama

  • unspecified to ≤ latestaffected

References