High severity7.5NVD Advisory· Published Mar 20, 2025· Updated Jun 17, 2026
CVE-2025-0315
CVE-2025-0315
Description
A vulnerability in ollama/ollama <=0.3.14 allows a malicious user to create a customized GGUF model file, upload it to the Ollama server, and create it. This can cause the server to allocate unlimited memory, leading to a Denial of Service (DoS) attack.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected packages
Versions sourced from the GitHub Security Advisory.
| Package | Affected versions | Patched versions |
|---|---|---|
github.com/ollama/ollamaGo | <= 0.3.14 | — |
Affected products
9- osv-coords7 versionspkg:apk/chainguard/k8sgptpkg:apk/chainguard/modspkg:apk/chainguard/ollama-fipspkg:apk/wolfi/k8sgptpkg:apk/wolfi/modspkg:golang/github.com/ollama/ollamapkg:rpm/opensuse/govulncheck-vulndb&distro=openSUSE%20Tumbleweed
< 0+ 6 more
- (no CPE)range: < 0
- (no CPE)range: < 1.8.1-r14
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 1.8.1-r14
- (no CPE)range: <= 0.3.14
- (no CPE)range: < 0.0.20250331T171002-1.1
Patches
Vulnerability mechanics
References
3- huntr.com/bounties/da414d29-b55a-496f-b135-17e0fcec67bcnvdExploitThird Party AdvisoryWEB
- github.com/advisories/GHSA-fccc-8m69-8r78ghsaADVISORY
- nvd.nist.gov/vuln/detail/CVE-2025-0315ghsaADVISORY
News mentions
0No linked articles in our index yet.