CVE-2024-39721: High severity Ollama Ollama vulnerability
An issue was discovered in Ollama before 0.1.34. The CreateModelHandler function uses os.Open to read a file until completion. The req.Path parameter is user-controlled and can be set to /dev/random, which is blocking, causing the goroutine to run infinitely (even after the HTTP request is aborted by the client).
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-39721?
CVE-2024-39721 has a severity rating of Medium due to the potential for denial of service from infinite blocking.
How do I fix CVE-2024-39721?
To fix CVE-2024-39721, upgrade to Ollama version 0.1.34 or later, where this issue has been addressed.
What is the impact of CVE-2024-39721?
The impact of CVE-2024-39721 is that it allows an attacker to block a goroutine indefinitely by manipulating the req.Path parameter.
Which versions of Ollama are affected by CVE-2024-39721?
Ollama versions earlier than 0.1.34 are affected by CVE-2024-39721.
What component of Ollama does CVE-2024-39721 affect?
CVE-2024-39721 affects the CreateModelHandler function in the Ollama server.