CVE-2025-0317: Divide By Zero in ollama/ollama
Published Mar 20, 2025
·Updated
A vulnerability in ollama/ollama versions <=0.3.14 allows a malicious user to upload and create a customized GGUF model file on the Ollama server. This can lead to a division by zero error in the ggufPadding function, causing the server to crash and resulting in a Denial of Service (DoS) attack.
Affected Software
3 affected components
Ollama Ollama<=0.3.14
go/github.com/ollama/ollama<=0.3.14
Ollama Ollama<=0.3.14
Event History
Mar 20, 2025
CVE Published
via MITRE·10:10 AM
Data Sourced
via MITRE·10:10 AM
DescriptionSeverityWeakness
Advisory Published
via GitHub·12:32 PM
Frequently Asked Questions
1
What is the severity of CVE-2025-0317?
CVE-2025-0317 is classified as a Denial of Service vulnerability due to its potential to crash the server.
2
How do I fix CVE-2025-0317?
To mitigate CVE-2025-0317, upgrade to Ollama version 0.3.15 or later.
3
What software is affected by CVE-2025-0317?
CVE-2025-0317 affects Ollama versions up to and including 0.3.14.
4
What exploit does CVE-2025-0317 enable?
CVE-2025-0317 allows a malicious user to upload a customized GGUF model file that can lead to a server crash.
5
What kind of error is related to CVE-2025-0317?
CVE-2025-0317 is related to a division by zero error occurring in the ggufPadding function.