High severityNVD Advisory· Published Mar 20, 2025· Updated Mar 20, 2025

Divide by Zero in ollama/ollama

CVE-2024-8063

Description

A divide by zero vulnerability exists in ollama/ollama version v0.3.3. The vulnerability occurs when importing GGUF models with a crafted type for block_count in the Modelfile. This can lead to a denial of service (DoS) condition when the server processes the model, causing it to crash.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

Package	Affected versions	Patched versions
github.com/ollama/ollamaGo	<= 0.3.3	—

Affected products

osv-coords5 versions
pkg:apk/chainguard/k8sgpt pkg:apk/chainguard/ollama-fips pkg:apk/wolfi/k8sgpt pkg:golang/github.com/ollama/ollama pkg:rpm/opensuse/govulncheck-vulndb&distro=openSUSE%20Tumbleweed
< 0+ 4 more
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: <= 0.3.3
- (no CPE)range: < 0.0.20250515T200012-1.1
Ollama/Ollamacpe-rescue
Range: unspecified

Patches

Vulnerability mechanics

References

github.com/advisories/GHSA-2xf2-gjm6-g2c6ghsaADVISORY
nvd.nist.gov/vuln/detail/CVE-2024-8063ghsaADVISORY
github.com/ollama/ollama/issues/8020ghsaWEB
github.com/pypa/advisory-database/tree/main/vulns/ollama/PYSEC-2025-144.yamlghsaWEB
huntr.com/bounties/fd8e1ed6-21d2-4c9e-8395-2098f11b7db9ghsaWEB

News mentions

No linked articles in our index yet.

cvss	0.455
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000