CVE-2024-37032

high

Description

Ollama before 0.1.34 does not validate the format of the digest (sha256 with 64 hex digits) when getting the model path, and thus mishandles the TestGetBlobsPath test cases such as fewer than 64 hex digits, more than 64 hex digits, or an initial ../ substring.

References

References
More

https://thehackernews.com/2024/11/critical-flaws-in-ollama-ai-framework.html

https://www.scworld.com/brief/new-ollama-rce-vulnerability-immediately-fixed

https://github.com/sangmorg1-debug/servguard

https://github.com/kodem-qa/ai-bom-test-fixtures

https://github.com/ahboon/CVE-2024-37032-scanner

https://github.com/karkis3c/cves

https://www.vicarius.io/vsociety/posts/probllama-in-ollama-a-tale-of-a-yet-another-rce-vulnerability-cve-2024-37032

https://github.com/ollama/ollama/pull/4175

https://github.com/ollama/ollama/compare/v0.1.33...v0.1.34

https://github.com/ollama/ollama/blob/adeb40eaf29039b8964425f69a9315f9f1694ba8/server/modelpath_test.go#L41-L58

https://euvd.enisa.europa.eu/vulnerability/EUVD-2024-1525

Details

Source: Mitre, NVD

Published: 2024-05-31

Updated: 2025-05-01

Named Vulnerability: ProbllamaNamed Vulnerability: GO-2024-2901Named Vulnerability: GHSA-8hqg-whrw-pv92

Risk Information

CVSS v2

Base Score: 9

Vector: CVSS2#AV:N/AC:L/Au:S/C:C/I:C/A:C

Severity: High

CVSS v3

Base Score: 8.8

Vector: CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Severity: High

EPSS

EPSS: 0.89633