extractFromZipFile in model.go in Ollama before 0.1.47 can extract members of a ZIP archive outside of the parent directory.

According to the self-reported version in its response header, the version of Ollama hosted on the remote web server is < 0.1.47. It is, therefore, affected by a Path Traversal through ZIP archive extraction.

Note that the scanner has not tested for these issues but has instead relied only on the application's self-reported version number.

There are packages installed that are affected by a vulnerability referenced in the following CVE:

  - extractFromZipFile in model.go in Ollama before 0.1.47 can extract members of a ZIP archive outside of the
    parent directory. (CVE-2024-45436)

The version of Ollama installed on the remote host is prior to 0.1.47. It is, therefore, affected by a path traversal vulnerability:

  - extractFromZipFile in model.go in Ollama before 0.1.47 can extract members of a ZIP archive outside of the parent     directory. (CVE-2024-45436)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
114577	Ollama < 0.1.47 Path Traversal	Web App Scanning	Component Vulnerability	high
412410	SCA: security update for github.com/ollama/ollama (GHSA-846m-99qv-67mg)	Tenable Cloud Security	SCA Checks	high
412410	SCA: security update for github.com/ollama/ollama (GHSA-846m-99qv-67mg)	Tenable Self-Hosted Container Security	SCA Checks	high
209520	Ollama < 0.1.47 Path Traversal	Nessus	Artificial Intelligence	high

Detections

Analytics

CVE-2024-45436

high

Tenable Plugins

high

high

high

high