CVE-2025-0317

ADVISORY - github

Summary

A vulnerability in ollama/ollama versions <=0.3.14 allows a malicious user to upload and create a customized GGUF model file on the Ollama server. This can lead to a division by zero error in the ggufPadding function, causing the server to crash and resulting in a Denial of Service (DoS) attack.

EPSS Score⁠: 0.00444 (0.631)

Common Weakness Enumeration (CWE)

ADVISORY - nist

CWE-369⁠

Divide By Zero

ADVISORY - github

CWE-369⁠

Divide By Zero

ADVISORY - gitlab

CWE-1035⁠

OWASP Top Ten 2017 Category A9 - Using Components with Known Vulnerabilities

CWE-369⁠

Divide By Zero

CWE-937⁠

OWASP Top Ten 2013 Category A9 - Using Components with Known Vulnerabilities

ADVISORY - redhat

CWE-369⁠

Divide By Zero

Impacted images

Sign in to Docker Scout

See which of your images are affected by this CVE and how to fix them by signing into Docker Scout.