Executive brief
Ollama Vulnerable to Denial of Service (DoS) via Crafted GZIP in github.com/ollama/ollama
Affected products
- Go github.com/ollama/ollama
Junglewise Threat Intelligence
CVE-2024-12886: GO-2025-3548 - Ollama Vulnerable to Denial of Service (DoS) via Crafted GZIP in github.com/ollama/ollama
CVE-2024-12886 · Severity: low · CVSS 3 · Published 2025-03-31
Technologies: github.com/ollama/ollama (Go). Vendors: Go.
Related threats
- GO-2026-5750 - Ollama is Vulnerable to Path Traversal in github.com/ollama/ollama
- Ollama heap out-of-bounds read in GGUF model loader
- GO-2025-4251 - Ollama has missing authentication enabling attackers to perform model management operations in github.com/ollama/ollama
- GO-2025-3851 - Ollama allows deletion of arbitrary files in github.com/ollama/ollama
- Ollama Cross-Domain Token Exposure in model pull mechanism