https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 11:51:42 +0000 https://cve.radiocsirt.org/vuln/bdu:2024-11081 bdu:2024-11081 https://cve.radiocsirt.org/vuln/bdu:2024-11081 https://cve.radiocsirt.org/vuln/euvd-2026-198889 EUVD-2026-198889 https://cve.radiocsirt.org/vuln/euvd-2026-198889 https://cve.radiocsirt.org/vuln/fkie_cve-2024-39720 <p>An issue was discovered in Ollama before 0.1.46. An attacker can use two HTTP requests to upload a malformed GGUF file containing just 4 bytes starting with the GGUF custom magic header. By leveraging a custom Modelfile that includes a FROM statement pointing to the attacker-controlled blob file, the attacker can crash the application through the CreateModel route, leading to a segmentation fault (signal SIGSEGV: segmentation violation).</p> <p>An issue was discovered in Ollama before 0.1.46. An attacker can use two HTTP requests to upload a malformed GGUF file containing just 4 bytes starting with the GGUF custom magic header. By leveraging a custom Modelfile that includes a FROM statement pointing to the attacker-controlled blob file, the attacker can crash the application through the CreateModel route, leading to a segmentation fault (signal SIGSEGV: segmentation violation).</p> https://cve.radiocsirt.org/vuln/fkie_cve-2024-39720 https://cve.radiocsirt.org/vuln/ghsa-95j2-w8x7-hm88 <p><strong>Affected:</strong> Go: github.com/ollama/ollama</p> <p>An issue was discovered in Ollama before 0.1.46. An attacker can use two HTTP requests to upload a malformed GGUF file containing just 4 bytes starting with the GGUF custom magic header. By leveraging a custom Modelfile that includes a FROM statement pointing to the attacker-controlled blob file, the attacker can crash the application through the CreateModel route, leading to a segmentation fault (signal SIGSEGV: segmentation violation).</p> <p><strong>Affected:</strong> Go: github.com/ollama/ollama</p> <p>An issue was discovered in Ollama before 0.1.46. An attacker can use two HTTP requests to upload a malformed GGUF file containing just 4 bytes starting with the GGUF custom magic header. By leveraging a custom Modelfile that includes a FROM statement pointing to the attacker-controlled blob file, the attacker can crash the application through the CreateModel route, leading to a segmentation fault (signal SIGSEGV: segmentation violation).</p> https://cve.radiocsirt.org/vuln/ghsa-95j2-w8x7-hm88 https://cve.radiocsirt.org/vuln/opensuse-su-2024:0350-1 <p>Security update for govulncheck-vulndb</p> <p>Security update for govulncheck-vulndb</p> https://cve.radiocsirt.org/vuln/opensuse-su-2024:0350-1 https://cve.radiocsirt.org/vuln/suse-su-2024:3950-1 <p>Security update for govulncheck-vulndb</p> <p>Security update for govulncheck-vulndb</p> https://cve.radiocsirt.org/vuln/suse-su-2024:3950-1