High severity7.5NVD Advisory· Published Mar 20, 2025· Updated Jun 17, 2026
CVE-2025-0317
CVE-2025-0317
Description
A vulnerability in ollama/ollama versions <=0.3.14 allows a malicious user to upload and create a customized GGUF model file on the Ollama server. This can lead to a division by zero error in the ggufPadding function, causing the server to crash and resulting in a Denial of Service (DoS) attack.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected packages
Versions sourced from the GitHub Security Advisory.
| Package | Affected versions | Patched versions |
|---|---|---|
github.com/ollama/ollamaGo | <= 0.3.14 | — |
Affected products
9- osv-coords7 versionspkg:apk/chainguard/k8sgptpkg:apk/chainguard/modspkg:apk/chainguard/ollama-fipspkg:apk/wolfi/k8sgptpkg:apk/wolfi/modspkg:golang/github.com/ollama/ollamapkg:rpm/opensuse/govulncheck-vulndb&distro=openSUSE%20Tumbleweed
< 0+ 6 more
- (no CPE)range: < 0
- (no CPE)range: < 1.8.1-r14
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 1.8.1-r14
- (no CPE)range: <= 0.3.14
- (no CPE)range: < 0.0.20250331T171002-1.1
Patches
Vulnerability mechanics
References
3- huntr.com/bounties/a9951bca-9bd8-49b2-b143-4cd4219f9fa0nvdExploitThird Party AdvisoryWEB
- github.com/advisories/GHSA-9gcr-28rp-cc24ghsaADVISORY
- nvd.nist.gov/vuln/detail/CVE-2025-0317ghsaADVISORY
News mentions
0No linked articles in our index yet.