CVE-2024-8063 - Vulnerability Details

Link	Providers
https://huntr.com/bounties/fd8e1ed6-21d2-4c9e-8395-2098f11b7db9
https://nvd.nist.gov/vuln/detail/CVE-2024-8063
https://www.cve.org/CVERecord?id=CVE-2024-8063

Type	Values Removed	Values Added
References		https://nvd.nist.gov/vuln/detail/CVE-2024-8063 https://www.cve.org/CVERecord?id=CVE-2024-8063
Metrics	threat_severity `None`	threat_severity `Important`

Type	Values Removed	Values Added
Metrics		ssvc `{'options': {'Automatable': 'yes', 'Exploitation': 'poc', 'Technical Impact': 'partial'}, 'version': '2.0.3'}`

Type	Values Removed	Values Added
Description		A divide by zero vulnerability exists in ollama/ollama version v0.3.3. The vulnerability occurs when importing GGUF models with a crafted type for `block_count` in the Modelfile. This can lead to a denial of service (DoS) condition when the server processes the model, causing it to crash.
Title		Divide by Zero in ollama/ollama
Weaknesses		CWE-369
References		https://huntr.com/bounties/fd8e1ed6-21d2-4c9e-8395-2098f11b7db9
Metrics		cvssV3_0 `{'score': 7.5, 'vector': 'CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'}`

Show plain JSON

{"dataType": "CVE_RECORD", "dataVersion": "5.1", "cveMetadata": {"cveId": "CVE-2024-8063", "assignerOrgId": "c09c270a-b464-47c1-9133-acb35b22c19a", "state": "PUBLISHED", "assignerShortName": "@huntr_ai", "dateReserved": "2024-08-21T18:58:58.443Z", "datePublished": "2025-03-20T10:10:56.139Z", "dateUpdated": "2025-03-20T18:14:42.676Z"}, "containers": {"cna": {"title": "Divide by Zero in ollama/ollama", "providerMetadata": {"orgId": "c09c270a-b464-47c1-9133-acb35b22c19a", "shortName": "@huntr_ai", "dateUpdated": "2025-03-20T10:10:56.139Z"}, "descriptions": [{"lang": "en", "value": "A divide by zero vulnerability exists in ollama/ollama version v0.3.3. The vulnerability occurs when importing GGUF models with a crafted type for `block_count` in the Modelfile. This can lead to a denial of service (DoS) condition when the server processes the model, causing it to crash."}], "affected": [{"vendor": "ollama", "product": "ollama/ollama", "versions": [{"version": "unspecified", "status": "affected", "versionType": "custom", "lessThanOrEqual": "latest"}]}], "references": [{"url": "https://huntr.com/bounties/fd8e1ed6-21d2-4c9e-8395-2098f11b7db9"}], "metrics": [{"cvssV3_0": {"version": "3.0", "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "baseScore": 7.5, "baseSeverity": "HIGH"}}], "problemTypes": [{"descriptions": [{"type": "CWE", "lang": "en", "description": "CWE-369 Divide By Zero", "cweId": "CWE-369"}]}], "source": {"advisory": "fd8e1ed6-21d2-4c9e-8395-2098f11b7db9", "discovery": "EXTERNAL"}}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2025-03-20T17:50:17.989973Z", "id": "CVE-2024-8063", "options": [{"Exploitation": "poc"}, {"Automatable": "yes"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2025-03-20T18:14:42.676Z"}}]}}

{

dataType : CVE_RECORD (string)

dataVersion : 5.1 (string)

cveMetadata : { »

cveId : CVE-2024-8063 (string)

assignerOrgId : c09c270a-b464-47c1-9133-acb35b22c19a (string)

state : PUBLISHED (string)

assignerShortName : @huntr_ai (string)

dateReserved : 2024-08-21T18:58:58.443Z (string)

datePublished : 2025-03-20T10:10:56.139Z (string)

dateUpdated : 2025-03-20T18:14:42.676Z (string)

}

containers : { »

cna : { »

title : Divide by Zero in ollama/ollama (string)

providerMetadata : { »

orgId : c09c270a-b464-47c1-9133-acb35b22c19a (string)

shortName : @huntr_ai (string)

dateUpdated : 2025-03-20T10:10:56.139Z (string)

}

descriptions : [ »

0 : { »

lang : en (string)

value : A divide by zero vulnerability exists in ollama/ollama version v0.3.3. The vulnerability occurs when importing GGUF models with a crafted type for `block_count` in the Modelfile. This can lead to a denial of service (DoS) condition when the server processes the model, causing it to crash. (string)

}

]

affected : [ »

0 : { »

vendor : ollama (string)

product : ollama/ollama (string)

versions : [ »

0 : { »

version : unspecified (string)

status : affected (string)

versionType : custom (string)

lessThanOrEqual : latest (string)

}

]

}

]

references : [ »

0 : { »

url : https://huntr.com/bounties/fd8e1ed6-21d2-4c9e-8395-2098f11b7db9 (string)

}

]

metrics : [ »

0 : { »

cvssV3_0 : { »

version : 3.0 (string)

attackComplexity : LOW (string)

attackVector : NETWORK (string)

availabilityImpact : HIGH (string)

confidentialityImpact : NONE (string)

integrityImpact : NONE (string)

privilegesRequired : NONE (string)

scope : UNCHANGED (string)

userInteraction : NONE (string)

vectorString : CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H (string)

baseScore : 7.5 (number)

baseSeverity : HIGH (string)

}

]

problemTypes : [ »

0 : { »

descriptions : [ »

0 : { »

type : CWE (string)

lang : en (string)

description : CWE-369 Divide By Zero (string)

cweId : CWE-369 (string)

}

]

}

]

source : { »

advisory : fd8e1ed6-21d2-4c9e-8395-2098f11b7db9 (string)

discovery : EXTERNAL (string)

}

adp : [ »

0 : { »

metrics : [ »

0 : { »

other : { »

type : ssvc (string)

content : { »

timestamp : 2025-03-20T17:50:17.989973Z (string)

id : CVE-2024-8063 (string)

options : [ »

0 : { »

Exploitation : poc (string)

}

1 : { »

Automatable : yes (string)

}

2 : { »

Technical Impact : partial (string)

}

]

role : CISA Coordinator (string)

version : 2.0.3 (string)

}

]

title : CISA ADP Vulnrichment (string)

providerMetadata : { »

orgId : 134c704f-9b21-4f2e-91b3-4a467353bcc0 (string)

shortName : CISA-ADP (string)

dateUpdated : 2025-03-20T18:14:42.676Z (string)

}

]

}

Show plain JSON

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2024-8063", "role": "CISA Coordinator", "options": [{"Exploitation": "poc"}, {"Automatable": "yes"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2025-03-20T17:50:17.989973Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2025-03-20T17:50:20.245Z"}}], "cna": {"title": "Divide by Zero in ollama/ollama", "source": {"advisory": "fd8e1ed6-21d2-4c9e-8395-2098f11b7db9", "discovery": "EXTERNAL"}, "metrics": [{"cvssV3_0": {"scope": "UNCHANGED", "version": "3.0", "baseScore": 7.5, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "NONE"}}], "affected": [{"vendor": "ollama", "product": "ollama/ollama", "versions": [{"status": "affected", "version": "unspecified", "versionType": "custom", "lessThanOrEqual": "latest"}]}], "references": [{"url": "https://huntr.com/bounties/fd8e1ed6-21d2-4c9e-8395-2098f11b7db9"}], "descriptions": [{"lang": "en", "value": "A divide by zero vulnerability exists in ollama/ollama version v0.3.3. The vulnerability occurs when importing GGUF models with a crafted type for `block_count` in the Modelfile. This can lead to a denial of service (DoS) condition when the server processes the model, causing it to crash."}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-369", "description": "CWE-369 Divide By Zero"}]}], "providerMetadata": {"orgId": "c09c270a-b464-47c1-9133-acb35b22c19a", "shortName": "@huntr_ai", "dateUpdated": "2025-03-20T10:10:56.139Z"}}}, "cveMetadata": {"cveId": "CVE-2024-8063", "state": "PUBLISHED", "dateUpdated": "2025-03-20T18:14:42.676Z", "dateReserved": "2024-08-21T18:58:58.443Z", "assignerOrgId": "c09c270a-b464-47c1-9133-acb35b22c19a", "datePublished": "2025-03-20T10:10:56.139Z", "assignerShortName": "@huntr_ai"}, "dataVersion": "5.1"}

{

dataType : CVE_RECORD (string)

containers : { »

adp : [ »

0 : { »

title : CISA ADP Vulnrichment (string)

metrics : [ »

0 : { »

other : { »

type : ssvc (string)

content : { »

id : CVE-2024-8063 (string)

role : CISA Coordinator (string)

options : [ »

0 : { »

Exploitation : poc (string)

}

1 : { »

Automatable : yes (string)

}

2 : { »

Technical Impact : partial (string)

}

]

version : 2.0.3 (string)

timestamp : 2025-03-20T17:50:17.989973Z (string)

}

]

providerMetadata : { »

orgId : 134c704f-9b21-4f2e-91b3-4a467353bcc0 (string)

shortName : CISA-ADP (string)

dateUpdated : 2025-03-20T17:50:20.245Z (string)

}

]

cna : { »

title : Divide by Zero in ollama/ollama (string)

source : { »

advisory : fd8e1ed6-21d2-4c9e-8395-2098f11b7db9 (string)

discovery : EXTERNAL (string)

}

metrics : [ »

0 : { »

cvssV3_0 : { »

scope : UNCHANGED (string)

version : 3.0 (string)

baseScore : 7.5 (number)

attackVector : NETWORK (string)

baseSeverity : HIGH (string)

vectorString : CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H (string)

integrityImpact : NONE (string)

userInteraction : NONE (string)

attackComplexity : LOW (string)

availabilityImpact : HIGH (string)

privilegesRequired : NONE (string)

confidentialityImpact : NONE (string)

}

]

affected : [ »

0 : { »

vendor : ollama (string)

product : ollama/ollama (string)

versions : [ »

0 : { »

status : affected (string)

version : unspecified (string)

versionType : custom (string)

lessThanOrEqual : latest (string)

}

]

}

]

references : [ »

0 : { »

url : https://huntr.com/bounties/fd8e1ed6-21d2-4c9e-8395-2098f11b7db9 (string)

}

]

descriptions : [ »

0 : { »

lang : en (string)

value : A divide by zero vulnerability exists in ollama/ollama version v0.3.3. The vulnerability occurs when importing GGUF models with a crafted type for `block_count` in the Modelfile. This can lead to a denial of service (DoS) condition when the server processes the model, causing it to crash. (string)

}

]

problemTypes : [ »

0 : { »

descriptions : [ »

0 : { »

lang : en (string)

type : CWE (string)

cweId : CWE-369 (string)

description : CWE-369 Divide By Zero (string)

}

]

}

]

providerMetadata : { »

orgId : c09c270a-b464-47c1-9133-acb35b22c19a (string)

shortName : @huntr_ai (string)

dateUpdated : 2025-03-20T10:10:56.139Z (string)

}

cveMetadata : { »

cveId : CVE-2024-8063 (string)

state : PUBLISHED (string)

dateUpdated : 2025-03-20T18:14:42.676Z (string)

dateReserved : 2024-08-21T18:58:58.443Z (string)

assignerOrgId : c09c270a-b464-47c1-9133-acb35b22c19a (string)

datePublished : 2025-03-20T10:10:56.139Z (string)

assignerShortName : @huntr_ai (string)

}

dataVersion : 5.1 (string)

}

Show plain JSON

{"cveTags": [], "descriptions": [{"lang": "en", "value": "A divide by zero vulnerability exists in ollama/ollama version v0.3.3. The vulnerability occurs when importing GGUF models with a crafted type for `block_count` in the Modelfile. This can lead to a denial of service (DoS) condition when the server processes the model, causing it to crash."}], "id": "CVE-2024-8063", "lastModified": "2025-03-20T10:15:40.757", "metrics": {"cvssMetricV30": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.0"}, "exploitabilityScore": 3.9, "impactScore": 3.6, "source": "security@huntr.dev", "type": "Secondary"}]}, "published": "2025-03-20T10:15:40.757", "references": [{"source": "security@huntr.dev", "url": "https://huntr.com/bounties/fd8e1ed6-21d2-4c9e-8395-2098f11b7db9"}], "sourceIdentifier": "security@huntr.dev", "vulnStatus": "Received", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-369"}], "source": "security@huntr.dev", "type": "Primary"}]}

{

cveTags : [ *empty* ]

descriptions : [ »

0 : { »

lang : en (string)

value : A divide by zero vulnerability exists in ollama/ollama version v0.3.3. The vulnerability occurs when importing GGUF models with a crafted type for `block_count` in the Modelfile. This can lead to a denial of service (DoS) condition when the server processes the model, causing it to crash. (string)

}

]

id : CVE-2024-8063 (string)

lastModified : 2025-03-20T10:15:40.757 (string)

metrics : { »

cvssMetricV30 : [ »

0 : { »

cvssData : { »

attackComplexity : LOW (string)

attackVector : NETWORK (string)

availabilityImpact : HIGH (string)

baseScore : 7.5 (number)

baseSeverity : HIGH (string)

confidentialityImpact : NONE (string)

integrityImpact : NONE (string)

privilegesRequired : NONE (string)

scope : UNCHANGED (string)

userInteraction : NONE (string)

vectorString : CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H (string)

version : 3.0 (string)

}

exploitabilityScore : 3.9 (number)

impactScore : 3.6 (number)

source : security@huntr.dev (string)

type : Secondary (string)

}

]

}

published : 2025-03-20T10:15:40.757 (string)

references : [ »

0 : { »

source : security@huntr.dev (string)

url : https://huntr.com/bounties/fd8e1ed6-21d2-4c9e-8395-2098f11b7db9 (string)

}

]

sourceIdentifier : security@huntr.dev (string)

vulnStatus : Received (string)

weaknesses : [ »

0 : { »

description : [ »

0 : { »

lang : en (string)

value : CWE-369 (string)

}

]

source : security@huntr.dev (string)

type : Primary (string)

}

]

}

Show plain JSON

{"bugzilla": {"description": "ollama: Divide by Zero in ollama/ollama", "id": "2353551", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2353551"}, "csaw": false, "cvss3": {"cvss3_base_score": "7.5", "cvss3_scoring_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "status": "draft"}, "cwe": "CWE-369", "details": ["A divide by zero vulnerability exists in ollama/ollama version v0.3.3. The vulnerability occurs when importing GGUF models with a crafted type for `block_count` in the Modelfile. This can lead to a denial of service (DoS) condition when the server processes the model, causing it to crash.", "A flaw was found in Ollama. This vulnerability allows a denial of service (DoS) via a crafted Modelfile containing a specific type for block_count when importing GGUF models, leading to a server crash."], "name": "CVE-2024-8063", "package_state": [{"cpe": "cpe:/a:redhat:ansible_automation_platform:2", "fix_state": "Not affected", "package_name": "ansible-automation-platform-24/lightspeed-rhel8", "product_name": "Red Hat Ansible Automation Platform 2"}, {"cpe": "cpe:/a:redhat:ansible_automation_platform:2", "fix_state": "Not affected", "package_name": "ansible-automation-platform-24/platform-resource-runner-rhel8", "product_name": "Red Hat Ansible Automation Platform 2"}], "public_date": "2025-03-20T10:10:56Z", "references": ["https://www.cve.org/CVERecord?id=CVE-2024-8063\nhttps://nvd.nist.gov/vuln/detail/CVE-2024-8063\nhttps://huntr.com/bounties/fd8e1ed6-21d2-4c9e-8395-2098f11b7db9"], "threat_severity": "Important"}

{

bugzilla : { »

description : ollama: Divide by Zero in ollama/ollama (string)

id : 2353551 (string)

url : https://bugzilla.redhat.com/show_bug.cgi?id=2353551 (string)

}

csaw : false (boolean)

cvss3 : { »

cvss3_base_score : 7.5 (string)

cvss3_scoring_vector : CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H (string)

status : draft (string)

}

cwe : CWE-369 (string)

details : [ »

0 : A divide by zero vulnerability exists in ollama/ollama version v0.3.3. The vulnerability occurs when importing GGUF models with a crafted type for `block_count` in the Modelfile. This can lead to a denial of service (DoS) condition when the server processes the model, causing it to crash. (string)

1 : A flaw was found in Ollama. This vulnerability allows a denial of service (DoS) via a crafted Modelfile containing a specific type for block_count when importing GGUF models, leading to a server crash. (string)

]

name : CVE-2024-8063 (string)

package_state : [ »

0 : { »

cpe : cpe:/a:redhat:ansible_automation_platform:2 (string)

fix_state : Not affected (string)

package_name : ansible-automation-platform-24/lightspeed-rhel8 (string)

product_name : Red Hat Ansible Automation Platform 2 (string)

}

1 : { »

cpe : cpe:/a:redhat:ansible_automation_platform:2 (string)

fix_state : Not affected (string)

package_name : ansible-automation-platform-24/platform-resource-runner-rhel8 (string)

product_name : Red Hat Ansible Automation Platform 2 (string)

}

]

public_date : 2025-03-20T10:10:56Z (string)

references : [ »

0 : https://www.cve.org/CVERecord?id=CVE-2024-8063 https://nvd.nist.gov/vuln/detail/CVE-2024-8063 https://huntr.com/bounties/fd8e1ed6-21d2-4c9e-8395-2098f11b7db9 (string)

]

threat_severity : Important (string)

}

Metrics

Attack Vector Network

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact None

Integrity Impact None

Availability Impact High

User Interaction None

Exploitation poc

Automatable yes

Technical Impact partial

Affected Vendors & Products

Metrics

Attack Vector Network

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact None

Integrity Impact None

Availability Impact High

User Interaction None

Exploitation poc

Automatable yes

Technical Impact partial

Affected Vendors & Products

JSON object

JSON object

JSON object

JSON object